File Format Restriction for "Manage External Data" Feature

[norakmal.hakim]

We have a client who's concerned with accidental or intentional upload of malicious files into the server via the "Manage External Data" feature and would like to restrict the file type to either .csv or .txt files. Is there a configuration that will allow us to restrict the file type that can be uploaded via this feature?

If there's no such configuration, do you know how I can configure the feature in such a way so that the user is only allowed to upload a file from a particular secured location rather than uploading from the user's local environment?

Thanks a lot!

[MFGF]

We have a client who's concerned with accidental or intentional upload of malicious files into the server via the "Manage External Data" feature and would like to restrict the file type to either .csv or .txt files. Is there a configuration that will allow us to restrict the file type that can be uploaded via this feature?

If there's no such configuration, do you know how I can configure the feature in such a way so that the user is only allowed to upload a file from a particular secured location rather than uploading from the user's local environment?

Thanks a lot!

Hi,

"Manage external data" doesn't upload anything - it simply allows the Cognos server to point to the file in-place.

Cheers!

MF.

[norakmal.hakim]

Thanks for the reply!

I was wondering if you know where in IBM's documentation does it say this because we will need to convince the client that this is the case and they only trust if it comes from IBM's official documentation.

[Michael75]

Here is "IBM's official documentation" on the subject:

https://www-304.ibm.com/support/knowledgecenter/SSEP7J_10.2.2/com.ibm.swg.ba.cognos.ug_cr_rptstd.10.2.2.doc/c_rs_cwa_mng_ext_dta.html?lang=en

which confirms the reply you received from MF. It also lists the files types that can be imported. Even if you were able to restrict the types to .csv and .txt (which you're not), any user who wanted to get round such a restriction and upload his personal Excel DB would only have to save it in one of these two formats. In other words, I don't think the restriction requested by your client makes much sense.

As for the location issue, a user who is authorised to use External Data may import data from any location to which he has access.