Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot share dashboard with static parameters #4988

Closed
chou666 opened this issue Jun 22, 2020 · 2 comments
Closed

Cannot share dashboard with static parameters #4988

chou666 opened this issue Jun 22, 2020 · 2 comments

Comments

@chou666
Copy link

chou666 commented Jun 22, 2020

Issue Summary

Regarding the message: "For your security, sharing is currently not supported for dashboards containing queries with text parameters. Consider changing the text parameters in your query to a different type."

I do not understand why there is a security risk: user having the public link cannot change the parameter ?

Steps to Reproduce

  1. I create a query with static parameter
  2. I add my query in a dashboard using static value
  3. When I try to share it, I have a error message "For your security, sharing is currently not supported for dashboards containing queries with text parameters. Consider changing the text parameters in your query to a different type."

If the dashboard contain only query with static parameters, the dashboard can be considered as secured, no ?

Technical details:

  • Redash Version: 9.0.0-beta
  • Browser/OS: Firefox 77.0.1 64bits / Ubuntu 19.10
  • How did you install Redash: on a virtual machine
@chou666
Copy link
Author

chou666 commented Jun 22, 2020

Don't know if link to #3659

@chou666
Copy link
Author

chou666 commented Jun 22, 2020

OK, after further investigation, All my queries use a "number" parameter except one.
When I fix it to a number, the dashboard can be shared !

@chou666 chou666 closed this as completed Jun 22, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant