Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
5 years ago
Solved

Publish to Web - Security Questions

Hi, 

 

I have a situation where the dashboard will be public has a map visualisation that uses longitude and latitude data - Is it possible to show this visualisation without revealing the longitude/latitude data at all?

 

For a report that was published to web, I have added the following restrictions in Power BI:

  • The visualisation (map) in mind has its Visual Headers disabled.
  • Can't right-click the visualisation to "Show as a table", due to the map's right-click interaction.
  • The tooltip has been replaced with a customised tooltip (that doesn't include longitude/latitude).
  • The longitude/latitude data isn't used anywhere else in the dashboard.

 

1. If it is published to web, is it still possible for users to access the longitude/latitude data?

 

2. When it is published to the web (i.e. https://app.powerbi.com/view?r=..... ), are there any data security vulnerabilities? Is it still possible for users to access this data at all?
e.g. Pulling data using API/GET/POST/etc.

 

 

Would really appreciate the help

 

 

Thank you,

 

Adrian

 

 

 

  • Hi Anonymous 

     

    The limitations of publish to web is that viewers cannot download or extract the data.

     

    As long as your columns are hidden the viewers should not be able to see the lat or long.

     

    With that being said it is plotted on a map where the viewers will be able to zoom in and find the location on the map!

  • Hi, Anonymous 

     

    It’s my pleasure to answer for you.

    According to your description,You have done some restrictions to manually control the appearance of latitude and longitude in the report. In fact, there are not as many interactions on the publish to web report as on the PBI, such as ‘show as a table’ you set.

    You can try not to share the link first, and then check whether the content of publish to web meets your requirements, and make changes.Generally speaking, the content that cannot be seen in the reading view mode on the PBI service is also invisible on 'publish to web'. After the requirements are met, the link can be shared. At this time, everyone who knows the link can see the content without permission. Also, Users can't use other methods to extract unseen data.

    Reference link:Publish to web from Power BI - Power BI | Microsoft Docs

    If it doesn’t solve your problem, please feel free to ask me.

     

    Best Regards

    Janey Guo

     

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

4 Replies

  • Hi Anonymous 

     

    The limitations of publish to web is that viewers cannot download or extract the data.

     

    As long as your columns are hidden the viewers should not be able to see the lat or long.

     

    With that being said it is plotted on a map where the viewers will be able to zoom in and find the location on the map!

  • v-janeyg-msft's avatar
    v-janeyg-msft
    Icon for Community Support rankCommunity Support

    Hi, Anonymous 

     

    It’s my pleasure to answer for you.

    According to your description,You have done some restrictions to manually control the appearance of latitude and longitude in the report. In fact, there are not as many interactions on the publish to web report as on the PBI, such as ‘show as a table’ you set.

    You can try not to share the link first, and then check whether the content of publish to web meets your requirements, and make changes.Generally speaking, the content that cannot be seen in the reading view mode on the PBI service is also invisible on 'publish to web'. After the requirements are met, the link can be shared. At this time, everyone who knows the link can see the content without permission. Also, Users can't use other methods to extract unseen data.

    Reference link:Publish to web from Power BI - Power BI | Microsoft Docs

    If it doesn’t solve your problem, please feel free to ask me.

     

    Best Regards

    Janey Guo

     

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi GilbertQ and v-janeyg-msft ,

     

    Thank you both for your replies.

    I'm glad that this will restrict users from viewing the longitude and latitude data.

    Unfortunately the map zoom issues that GilbertQ mentioned will be a concern, but I'll post this as another question.

     

    Thanks again for both of your help, really appreciate it,

     

    Adrian