Spotfire® Server and Environment Security

IronPython

IronPython scripts can access the capabilities available in the Spotfire Analyst API, and also other APIs provided by the operating system. These capabilities include running arbitrary commands; therefore, strict control must be employed to those users who are allowed to author and mark scripts as trusted in the library (such as members of the Script Author group).

Component Description
Authorization Members of the Script Author group can mark scripts as trusted to be executed by others.
Execution context
  • The script is executed on the computer that opens the file, which can be either on the computer running Spotfire Web Player, the Spotfire Analyst client or Spotfire Automation Services, depending on where the file is opened.
  • The script is executed with privileges of the user who is currently logged in, or of the service account for which the service is set to run. In some cases where Kerberos with delegation is configured, the script executes in the end users' context.