-
Change Project Variables ONLY Permission for APPs without Allowing Changes to the rest of the flow.
In discussion with customer support, I was told that:“Only instance administrators can change the run as user. So while a user can create an instance of an application and technically modify the flow, it will still run under their credentials.” In practice, we’ve seen a different pattern emerge. Developers often create app…
-
Secure “Run As” Permissions for Visual Apps
Dataiku currently switches “Run As” permissions to the end user when the App instance is created. To work around this, developers create app instances with their own credentials and grant access, often requiring full edit permissions for users to modify variables. While this enables access to otherwise restricted data (the…
-
[Samsung Fire & Marine] Action is needed to prevent logins from sessions logged in from other IPs
If a session logged in from an IP address called A is tampered with by a user logged in from an IP address called B through the developer tool in IE Edge, the user information will be changed. This needs to be improved as it risks allowing regular users to escalate their privileges to administrator status and manipulate…
-
Update user profile/license assigned by LDAP mapping
Hi! I am testing in Dataiku 11.4 with user profile (or license) setting, via LDAP mapping. In my tests the profile is only assigned when the user logs in for the first time and registers his user. Subsequent changes to LDAP groups do not update the assigned profile in Dataiku. That is, a user accessing Dataiku for the…
-
python api client SSL ERROR
I am getting the following error while trying to connect to the automation node using the python api client requests.exceptions.SSLError: HTTPSConnectionPool(host='dataiku-auto.fg.rbc.com', port=443): Max retries exceeded with url: /dip/publicapi/projects/card_engagement_class/scenarios/scheduled_partition/run (Ca\ used by…
-
does DSS support switch IAM role?
Does DSS support the switch of IAM role, as described here? https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-api.html To access an S3 bucket in other account we would need to switch and use a cross account role, Thanks
-
Preventing users from accessing managed datasets as input
We are planning on using SQL Server tables as part of our managed datasets, setting the "schema name" field in the connection to the project key. This works well so far for managed datasets -- it's easy to identify all of the tables belonging to a particular project, and it prevents the users from inadvertently overwriting…
-
Failing to train on a python 3.7 code env
As of 18 feb 2022, newly createdpython 3.7+ code envs may fail to train models with the following error message : MarkupSafe>=2.0.1,<2.1.0 This is due to Markupsafe releasing a new version incompatible with other libs in the code env. To avoid/fix the problem, one has to manually pin Markupsafe to the 2.0.1 version. This…
-
Partition Project Permission between Multiple Administrators
We have multiple administrators in our Dataiku instance. Let us say they are administrators A and B. Is it possible to give a specific project permission only to administrator A and not to B? Can the project/environment permissions between administrators in the same instance be partitioned?
-
Code sample for setting (granting) permissions on projects for a specific group
Would it be possible to add a code sample for setting (granting) permissions on projects for a specific group into the documentation? Thanks