Spotfire® Server and Environment Security

IronPython

IronPython scripts can access the capabilities available in the Spotfire Analyst API, and also other APIs provided by the operating system. These capabilities include running arbitrary commands; therefore, strict control must be employed to those users who are allowed to author and mark scripts as trusted in the library (such as members of the Script Author group).

Component Description
Authorization Members of the Script Author group can mark scripts as trusted to be executed by others.
Execution context
  • The script is executed on the computer that opens the file, which can be either on the computer running Spotfire Web Player, the Spotfire Analyst client or Spotfire Automation Services, depending on where the file is opened.
  • The script is executed with privileges of the user who is currently logged in, or of the service account for which the service is set to run. In some cases where Kerberos with delegation is configured, the script executes in the end users' context.
  • Scripts used by the Automation Services Job Builder Execute script task are executed if both the account creating jobs, and the account executing jobs are members of the Script Author group. Additionally, for editing jobs with a script task, the user must have the Author Scripts license enabled.
    Note: When using Automation Services to execute scripts there is no script trust.