Product: TIBCO Spotfire®
How to turn off data function trust feature for Spotfire and TERR Service?
Spotfire data function trust feature is enabled by default to check if a data function to be executed has come from a trusted source.
When data function trust feature is disabled in Spotfire, the behavior would be just like the trust concept does not exist. There will be no dialog popping up asking for trust. This applies to data functions with all types of scripts, including TERR scripts, Open source R scripts, python scripts, inline terr scripts as well.
How to turn off data function trust feature for Spotfire and TERR Service? 1. For TIBCO Spotfire Analyst/Business Author/Consumer: Set the IgnoreTrustCheckpreference to true
You can turn off this data function trust feature for "Everyone" through Spotfire menu "Tools > Administration Manager > Preferences > DataFunctions > IgnoreTrustCheck" and edit IgnoreTrustCheck to true.
To configure the property "disable.spotfire.trust.checks" for the TERR service node, please follow the instructions documented in the Configuring the TERR service section of the TERR Service Installation and Administration manual, that is, exporting the TERR service properties, editing the exported property file to have property "disable.spotfire.trust.checks: TRUE", importing the edited property file (giving a new configuration name), and then applying the new configuration through "Nodes & Services" under the administration console for Spotfire Server. TERR service will restart to read the new configuration.
In a situation where user is executing data functions with TERR scripts through TERR Service from Web player, user must switch off trust checking by setting the Tools menu preference to TRUE, and also change the disable.spotfire.trust.checks configuration property on the TERR service to TRUE. Setting either of these options without setting the other may cause unexpected results. So it is recommended to turn off both trust checking properties.
Setting scripts and data function trust check feature off results in all Spotfire data functions executing unrestricted.
When allowing a script to run within an analysis, it is important to consider security. A script or data function written by a malevolent person could potentially perform unexpected or undesired actions. Therefore, we strongly recommend that you ensure that your service is fully secured, that engine containers are enabled, and that network access from the containers is limited (using a firewall) to only necessary servers and ports.
For more information about script and data function trust, see the product guide documents "TIBCO Spotfire® Analyst User's Guide" and "TIBCO Spotfire® Administration Manager User's Guide" which can be downloaded from https://docs.tibco.com/products/tibco-spotfire-analyst-10-8-0.
Article is closed for comments.