TIBCO Spotfire® Server and Environment Security

TERR Data Functions

TERR is an implementation of the R programming language that provides restricted and unrestricted execution environments. TERR data functions running in unrestricted mode have access to the operating system and can run arbitrary commands.

Component Description
Authorization
  • Members of the Script Author group can save data functions as trusted to be executed in unrestricted mode for other users.
  • Spotfire Statistics Services can be configured to require authentication. It runs as a separate product.
  • TERR service runs in a node manager and is called using the Spotfire Server acting as a reverse proxy. It requires an authenticated Spotfire session.
Execution context A TERR data function runs locally or remotely. Local execution takes place on the Spotfire client itself. Remote execution is when a TERR data function is sent off from a Spotfire client, Spotfire Web Player service, or Spotfire Automation Services service to a TIBCO Spotfire Statistics Services service (a stand-alone product) or TERR service (which runs on a node manager).