graphite-dev team mailing list archive

Thread
Date

Re: [Question #201469]: Set permissions on data

To: graphite-dev@xxxxxxxxxxxxxxxxxxx
From: Nicholas Leskiw <question201469@xxxxxxxxxxxxxxxxxxxxx>
Date: Tue, 26 Jun 2012 21:06:08 -0000
Reply-to: question201469@xxxxxxxxxxxxxxxxxxxxx
Sender: bounces@xxxxxxxxxxxxx

Question #201469 on Graphite changed:
https://answers.launchpad.net/graphite/+question/201469

    Status: Open => Answered

Nicholas Leskiw proposed the following answer:
Graphite currently has no functionality to hide metrics from certain
users.  It was not designed to be used in an insecure environment and we
don't recommend using it if you have confidential data, or non-
authorized users can get to the webapp.

You do, however, have some options:

1. Move the confidential metrics to a different instance, and use firewall rules to prevent access from unauthorized people. 
2. Pull graphs with wget / curl, move them to a webserver once a minute ( or however often) and only give untrusted users access to these pre-generated graphs. (Overwrite them and write a pretty, static HTML page that will arrange them and stuff.) 

I hope this answers your question.

-- 
You received this question notification because you are a member of
graphite-dev, which is an answer contact for Graphite.