Pentaho

 View Only

 Securize JNDI database connections

  • Pentaho
  • Ctools
  • Pentaho
David Martinez's profile image
David Martinez posted 11-27-2018 13:44

We have almost 15 diferent datasources, related to diferent services. Acord to development/requirements convenience, all of them are standard JNDI connections.

E.g. Three of them: News, projects and accounting.

We also have several user roles, with diferent access rights. E.g. everyone can see News data, but only project managers can see projects data, and so on.

Everyone can upload it`s own reports or create custom dashboards, so just knowing JNDI names, you can access whole server data with no restriction... We can't find how to restrict datasource acces by role, how do you think it can be done?


#Ctools
#Pentaho
Dan Keeley's profile image
Dan Keeley posted 12-20-2018 14:36

Have you had a look at the multi tenancy stuff?

This is the right area to look into though.  maybe you can find some associated procedures/calls in this area to overwrite with classes that return only the datasources that user should be able to see.

https://help.pentaho.com/Documentation/7.1/0R0/070/Multi-Tenancy

Related Content