Spotfire® Server and Environment Security

TERR Data Functions

Spotfire® Enterprise Runtime for R (a/k/a TERR™) is an implementation of the R programming language that provides restricted and unrestricted execution environments. TERR data functions running in unrestricted mode have access to the operating system and can run arbitrary commands.

Component Description
Authorization
  • Members of the Script Author group can save data functions as trusted to be executed in unrestricted mode for other users.
  • Spotfire Statistics Services can be configured to require authentication. It runs as a separate product.
  • Spotfire® Enterprise Runtime for R - Server Edition (a/k/a the TERR™ service) runs in a node manager and is called using the Spotfire Server acting as a reverse proxy. It requires an authenticated Spotfire session.
Execution context A TERR data function runs locally or remotely. Local execution takes place on the Spotfire client itself. Remote execution is when a TERR data function is sent off from a Spotfire client, Spotfire Web Player service, or Spotfire Automation Services service to a Spotfire Statistics Services service (a stand-alone product) or to TERR™ Server Edition (TERR service) (which runs on a node manager).
Note: For this Spotfire release, the Spotfire Statistics Services server is discontinued and will no longer be updated. You can continue to use it but no bug fixes or security patches will be provided, and it will eventually be removed.