-
[Samsung Fire & Marine] Action is needed to prevent logins from sessions logged in from other IPs
If a session logged in from an IP address called A is tampered with by a user logged in from an IP address called B through the developer tool in IE Edge, the user information will be changed. This needs to be improved as it risks allowing regular users to escalate their privileges to administrator status and manipulate…
-
Update user profile/license assigned by LDAP mapping
Hi! I am testing in Dataiku 11.4 with user profile (or license) setting, via LDAP mapping. In my tests the profile is only assigned when the user logs in for the first time and registers his user. Subsequent changes to LDAP groups do not update the assigned profile in Dataiku. That is, a user accessing Dataiku for the…
-
python api client SSL ERROR
I am getting the following error while trying to connect to the automation node using the python api client requests.exceptions.SSLError: HTTPSConnectionPool(host='dataiku-auto.fg.rbc.com', port=443): Max retries exceeded with url: /dip/publicapi/projects/card_engagement_class/scenarios/scheduled_partition/run (Ca\ used by…
-
does DSS support switch IAM role?
Does DSS support the switch of IAM role, as described here? https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-api.html To access an S3 bucket in other account we would need to switch and use a cross account role, Thanks
-
Preventing users from accessing managed datasets as input
We are planning on using SQL Server tables as part of our managed datasets, setting the "schema name" field in the connection to the project key. This works well so far for managed datasets -- it's easy to identify all of the tables belonging to a particular project, and it prevents the users from inadvertently overwriting…
-
Failing to train on a python 3.7 code env
As of 18 feb 2022, newly createdpython 3.7+ code envs may fail to train models with the following error message : MarkupSafe>=2.0.1,<2.1.0 This is due to Markupsafe releasing a new version incompatible with other libs in the code env. To avoid/fix the problem, one has to manually pin Markupsafe to the 2.0.1 version. This…
-
Partition Project Permission between Multiple Administrators
We have multiple administrators in our Dataiku instance. Let us say they are administrators A and B. Is it possible to give a specific project permission only to administrator A and not to B? Can the project/environment permissions between administrators in the same instance be partitioned?
-
Code sample for setting (granting) permissions on projects for a specific group
Would it be possible to add a code sample for setting (granting) permissions on projects for a specific group into the documentation? Thanks
-
security: have DSS listen on localhost interface only
I have a new (trial) DSS install using the AWS AMI. Out of the box DSS is listening on all interfaces, not just localhost, although all requests to DSS should be routed through the NGINX as proxy. How can I configure DSS to only listen on localhost? Thanks David
-
Which activities in DSS require that a user be added to the allowed_user_groups local Unix group?
Which activities in DSS require that a user be added to the allowed_user_groups local Unix group? When configuring the setup of the local code isolation capability of the User Isolation Framework* (formerly known as Multi-User Security), you must fill in the allowed_user_groups settings with the list of UNIX groups to…