Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Is there a way to prevent sb from adding Matches data to our instance through Federation feature? #441

Open
EwaSniegowskaPCSS opened this issue Oct 1, 2022 · 0 comments
Open

Is there a way to prevent sb from adding Matches data to our instance through Federation feature? #441

EwaSniegowskaPCSS opened this issue Oct 1, 2022 · 0 comments

Comments

@EwaSniegowskaPCSS
Copy link

Hi, I really like the Federation option, especially it can prove very useful in our planned setup.

But I'm afraid it can cause security issues. Let's say I have instance iqvoc02 and sb else has instance iqvoc01. If they set our instance URL in their Federation -> Sources option and set Create reverse matches for concept mappings to true, they can add data to our Matches section without our permission or knowledge (I didn't have to provide any credentials to achieve it).

Is this intended behaviour? Can I alter my instance configuration to prevent this?
@EwaSniegowskaPCSS EwaSniegowskaPCSS changed the title No way to prevent sb from adding Matches data to our instance through Federation feature Is there a way to prevent sb from adding Matches data to our instance through Federation feature? Oct 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@EwaSniegowskaPCSS