Deny administration capabilities on TIBCO Spotfire Server that is provisioned for access to external users

Deny administration capabilities on TIBCO Spotfire Server that is provisioned for access to external users

While provisioning access to Spotfire for external users whose machines are not part of the intranet, it may be required to secure the environment by disabling administration capabilities for that TIBCO Spotfire Server whose URL is exposed or where a load balancer / reverse proxy redirects requests to that TIBCO Spotfire Server.  To be able to disable administration tasks on specific Spotfire Servers, please refer to this documentation link. To disable administration tasks on all Spotfire Servers in the cluster, follow the solution below:

In this situation, it is useful to have multiple sites setup, one for internal users and the other for external users. Then the administration capabilities on the TIBCO Spotfire Server for internal users can still be enabled while it is disabled on the site which hosts the TIBCO Spotfire Server for external users. To disable the administration capabilities for a particular site/server, update the server configuration according to these steps:

1. Launch command prompt as administrator and export the Spotfire Server configuration by running the following command:  

   > config export-config -f

2. Run the following command to add a new property:

   > config set-config-prop --name="security.administration.enabled" --value="false"

3. Run the following command to import the configuration back to the Spotfire database:

   > config import-config -c "Added the property security.administration.enabled and set the value to false"

4. Restart the TIBCO Spotfire Server service for the changes to take effect. 

Doc: Sites

• https://docs.tibco.com/pub/spotfire_server/10.3.3/doc/html/TIB_sfire_server_tsas_admin_help/GUID-EC9DEFE0-C31F-48DF-8E13-11D8E4856E2D.html

Doc: Executing commands on the command line

• https://docs.tibco.com/pub/spotfire_server/10.3.3/doc/html/TIB_sfire_server_tsas_admin_help/GUID-6E14757E-1CD6-4FBD-9B48-2D54AFAD34EC.html

Doc: Disabling administration tasks on specific Spotfire Server in the cluster

• https://docs.tibco.com/pub/spotfire_server/10.3.4/doc/html/TIB_sfire_server_tsas_admin_help/GUID-9E8C796A-F360-41F6-A764-ED2CA3CB623D.html