Spotfire® Server and Environment Security

Custom Queries

A normal query (not custom) issued by a Spotfire data connection can use only allowed constructs (for example SELECT column FROM table) in a way that is tightly controlled by the Spotfire connector. A data connection with a custom query does not limit the types of language constructs that are allowed, and enables use of any language construct (for example INSERT, UPDATE, CREATE), as well as other functions specific to the data source.

Component Description
Authorization
  • Only users that are members of the Custom Query Author group can create custom queries to be trusted by other users.
  • The database server normally allows only connections that are authenticated and authorized. Spotfire must provide the connection with credentials to the database server.
Execution context
  • A custom query is executed on the database server and initiated from Spotfire Analyst, Spotfire Web Player, or Spotfire Automation Services.
  • The query runs with the permissions assigned to the currently-authenticated user by the database server.