Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DRAFT: Add README note for running TabPy without authentication #614

Closed
wants to merge 9 commits into from
2 changes: 1 addition & 1 deletion .scrutinizer.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
build:
environment:
python: 3.7.6
python: 3.8.10
nodes:
coverage:
project_setup:
Expand Down
12 changes: 12 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,18 @@ Consider reading TabPy documentation in the following order:
* [Authoring Python calculations in Tableau](docs/TableauConfiguration.md).
* [TabPy Tools](docs/tabpy-tools.md)

Important security note:

* By default, TabPy is configured without username/password authentication.
We strongly advise using TabPy only with authentication enabled. For more
information, see
[TabPy Server Configuration Instructions](docs/server-config.md#authentication).
Without authentication in place, if the TABPY_EVALUATE_ENABLE feature is
enabled (as it is by default), there is the possibility that unauthenticated
individuals could remotely execute code on the machine running TabPy.
Leaving these two settings in their default states together is highly
discouraged.

Troubleshooting:

* [TabPy Wiki](https://github.com/tableau/TabPy/wiki)
Expand Down
Loading