You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi, I really like the Federation option, especially it can prove very useful in our planned setup.
But I'm afraid it can cause security issues. Let's say I have instance iqvoc02 and sb else has instance iqvoc01. If they set our instance URL in their Federation -> Sources option and set Create reverse matches for concept mappings to true, they can add data to our Matches section without our permission or knowledge (I didn't have to provide any credentials to achieve it).
Is this intended behaviour? Can I alter my instance configuration to prevent this?
The text was updated successfully, but these errors were encountered:
EwaSniegowskaPCSS
changed the title
No way to prevent sb from adding Matches data to our instance through Federation feature
Is there a way to prevent sb from adding Matches data to our instance through Federation feature?
Oct 1, 2022
Hi, I really like the Federation option, especially it can prove very useful in our planned setup.
But I'm afraid it can cause security issues. Let's say I have instance
iqvoc02
and sb else has instanceiqvoc01
. If they set our instance URL in theirFederation -> Sources
option and setCreate reverse matches for concept mappings
totrue
, they can add data to ourMatches
section without our permission or knowledge (I didn't have to provide any credentials to achieve it).Is this intended behaviour? Can I alter my instance configuration to prevent this?
The text was updated successfully, but these errors were encountered: