andre_burwell's avatar
andre_burwell
New Member
1 year ago
Status:
New

Better Control Over Connection Permissions

Hello,


The reason for this ask is to remove the unneeded and annoying prompt to accept an anonymous connection with no credentials. I understand that there are 'possible' security risks with almost everything from some angle or point of view, but just as there is the selection "(Not Recommended) Allow any extension to load without validation or warning" under Security in the options settings, this could be added as well to remove the annoying popup that is going to just get clicked through anyway.


On a technical note this would open up codes that may connect or loop to multiple servers to pull in information. In my example we host backup data on multiple endpoints that require a token/visa. This time sensitive token/visa is only available via a POST command so the current authorization methods do not work and I am forced to do this all in m code. The token/visa is presented to the code but because it is used to pull data from multiple endpoints PowerBI requires the user to click through each server to accept the 'anonymous' connection.


This could be implemented in multiple ways to comply with security regulations or to give upper management that 'feel-good' feeling about the change:


  1. The option to 'pre-add' a URL to either the file or global permissions settings
  2. The ability to use wildcards for a URL on file or global permissions settings
  3. (ex. https://*-serverlife.com)
  4. The option to auto accept the connection if using 'Anonymous'.
  5. This can be a security toggle in the options section similar to the example in my first paragraph or even a parameter only available when using Web.Contents in m code or a custom connector


I'd love to hear your feedback on this request and your thoughts. Also to help me know your ideas page isn't just a 'black-hole' to send partners when they ask for more out of or help with the product. ;)



Best wishes,

Andre Burwell

Recent ideas