Spotfire® Server and Environment Security

Settings and Configuration Tasks for Spotfire Enterprise Runtime for R - Server Edition

You can use these settings to limit the capabilities of running data functions based on Spotfire® Enterprise Runtime for R (a/k/a TERR™).

Setting / Configuration task Default value Description
terr.restricted.execution.mode (Enforce restricted execution ) TRUE Enforce restricted execution mode for all scripts. Restricted execution mode in the service allows executing arbitrary scripts without worrying that the script could do malicious things, such as deleting files or uploading confidential data to a server over the internet. For more information, see the topic Safeguarding Your Environment in the Spotfire® Enterprise Runtime for R - Server Edition Installation and Administration guide.
use.engine.containers
  • Windows: FALSE
  • Linux: TRUE
Available on Linux only.

If your deployment is on a Linux server, then the default configuration for the service is to use containers (the property use.engine.containers: TRUE). Running the service with containers enabled prevents the engines from having access to the host system. See the topic Containerized Service in the Spotfire® Enterprise Runtime for R - Server Edition Installation and Administration guide for more information.

disable.spotfire.trust.checks FALSE Disable the trust check only if the service is installed on Linux, with Docker containers, where extra means have been taken to secure the container environment, or if all Spotfire users in the environment can be trusted.
Set file size upload limit 100MB See the topic File Size Upload Limit in the Spotfire® Enterprise Runtime for R - Server Edition Installation and Administration guide for more information.
Set TERR engine ports range 61001 - 62000 See Engine Ports in the Spotfire® Enterprise Runtime for R - Server Edition Installation and Administration guide for more information.
Enable JMX Monitoring OFF See Monitoring the service using JMX in the Spotfire® Enterprise Runtime for R - Server Edition Installation and Administration guide for more information.