Deny administration capabilities on TIBCO Spotfire Server that is provisioned for access to external users

Deny administration capabilities on TIBCO Spotfire Server that is provisioned for access to external users

book

Article ID: KB0076468

calendar_today

Updated On:

Products Versions
Spotfire Server 7.5 or higher

Description

While provisioning access to Spotfire for external users whose machines are not part of the intranet, it may be required to secure the environment by disabling administration capabilities for that TIBCO Spotfire Server whose URL is exposed or where a load balancer / reverse proxy redirects requests to that TIBCO Spotfire Server. 

Issue/Introduction

This article explains how we can configure the TIBCO Spotfire Server(s) to deny all administration capabilities on all servers in the cluster that is provisioned for access to external users

Resolution

To be able to disable administration tasks on specific Spotfire Servers, please refer to this documentation link. To disable administration tasks on all Spotfire Servers in the cluster, follow the solution below:

In this situation, it is useful to have multiple sites setup, one for internal users and the other for external users. Then the administration capabilities on the TIBCO Spotfire Server for internal users can still be enabled while it is disabled on the site which hosts the TIBCO Spotfire Server for external users. To disable the administration capabilities for a particular site/server, update the server configuration according to these steps:
  1. Launch command prompt as administrator and export the Spotfire Server configuration by running the following command:   
    > config export-config -f
  2. Run the following command to add a new property: 
    > config set-config-prop --name="security.administration.enabled" --value="false"
  3. Run the following command to import the configuration back to the Spotfire database: 
    > config import-config -c "Added the property security.administration.enabled and set the value to false"
  4. Restart the TIBCO Spotfire Server service for the changes to take effect. 

Additional Information

Doc: Sites Doc: Executing commands on the command line Doc: Disabling administration tasks on specific Spotfire Server in the cluster
Powered by Wolken Software