How to disable downloading of the analysis file from the option 'Download Analysis File' in Spotfire Server console

Krauss, Donald

December 24, 2025 11:45
Updated

Date Posted: 2020-03-20
Product: TIBCO Spotfire®

Problem:

Solution:

When you click 'Copy Link to Analysis' (as shown in the screenshot below) from Library Administrator and hit the copied URL in a browser, you get the option to download the analysis file. This article describes how to disable the functionality of downloading the analysis file.

User-added image Steps (For Spotfire 10.7 and prior versions):

1. Open [tss_install_dir]\tomcat\webapps\spotfire\WEB-INF\security-filter.xml

2. Locate the section starting with this:

<security-config>
  <id>protected.web</id>

3. Remove the following line from that section.

<url-pattern>/library/*</url-pattern>

4. Locate the section starting with this:

<security-config>
  <id>excluded</id>

5. Inside that section below <url-pattern>/*</url-pattern> add the following:

<url-pattern>/library/*</url-pattern>

Result should look similar to:

<!-- All access should be denied to all resources that are not specified above -->
<security-config>
  <id>excluded</id>
  <security-constraint>
    <display-name>excluded</display-name>
    <web-resource-collection>
     <web-resource-name>No Access</web-resource-name>
     <url-pattern>/*</url-pattern>
     <url-pattern>/library/*</url-pattern>
    </web-resource-collection>
...

</security-config>

6. Save the modified security-filter.xml and restart TIBCO Spotfire Server.

NOTES:

Steps 1-6 has to be applied to each TIBCO Spotfire Server. Step 1-6 also has to be repeated after Updating to new Service pack level and after Upgrading to new Server version.
Even after following the above steps, the 'Download Analysis File' option will still be visible but it will not download the file and will throw an 'HTTP Status 403 - Access is denied' message.
This setting is applicable for all the users of Spotfire Environment.

Steps (For Spotfire 10.8 and later versions):

1. Export the Server Configuration.

2. Set the 'library.direct-downloads.enabled' property value to false as shown in the screenshot below.

User-added image