Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Option to hide the few critical information from the cube response like dataSource, dbType and extDbType #7702

Open
ranjeetranjan opened this issue Jan 29, 2024 · 0 comments
Labels

Comments

@ranjeetranjan
Copy link

There should be an option to hide critical information from the response like:

"dataSource": "default", "dbType": "mysql", "extDbType": "cubestore",

Why do we need to hide?

Hiding specific information from a response, such as "dataSource," "dbType," and "extDbType," might be done for security or privacy reasons. Revealing certain details about the data source, database type, or external database type could potentially expose sensitive information to unauthorized users.

Here are some reasons why you might want to hide this information:

  1. Security: Disclosing technical details about the data source and database might provide insights into the underlying infrastructure. For security reasons, it's often advisable to limit the exposure of such details to prevent potential vulnerabilities.
  2. Privacy: Details like the database type and external database type may contain proprietary or internal information that the organization prefers to keep confidential. Limiting the visibility of these details helps protect the privacy of the organization's technology stack.
  3. Best Practices: Following best practices for information disclosure in responses. It's common to provide only the necessary information in API or system responses to reduce the risk of information leakage.

Alternatives solution considered
If any cube user wants to use this information they can use using environment variables.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants