🍉 Meet Flexmonster Pivot Table & Charts 2.9.Check out all the hot features!
Get Free Trial
  1. API reference
  2. Welcome
    1. Getting started
    2. Get Flexmonster
    3. Quick start
    4. System requirements
    5. Troubleshooting
    6. Managing license keys
    7. Migrating from WebDataRocks to Flexmonster
  3. Integration with frameworks
    1. Available tutorials
    2. Integration with Angular
    3. Integration with React
    4. Integration with Vue
    5. Other integrations
      1. Integration with Python
        1. Integration with Django
        2. Integration with Jupyter Notebook
      2. Integration with React Native
      3. Integration with Blazor
      4. Integration with AngularJS (v1.x)
      5. Integration with TypeScript
      6. Integration with R Shiny
      7. Integration with jQuery
      8. Integration with Ionic
      9. Integration with Electron.js
      10. Integration with Webpack
      11. Integration with RequireJS
  4. Connecting to Data Source
    1. Supported data sources
    2. JSON
      1. Connecting to JSON
      2. Connecting to JSON using Flexmonster Data Server
      3. Data types in JSON
    3. CSV
      1. Connecting to CSV
      2. Connecting to CSV using Flexmonster Data Server
      3. Data types in CSV
    4. Database
      1. Connecting to SQL databases
      2. Connecting to a MySQL database
      3. Connecting to a Microsoft SQL Server database
      4. Connecting to a PostgreSQL database
      5. Connecting to an Oracle database
    5. Flexmonster Data Server
      1. Introduction to Flexmonster Data Server
      2. Getting started with Flexmonster Data Server
      3. Flexmonster Admin Panel Guide
      4. Data sources guide
      5. Security and authorization guide
      6. The Data Server as a DLL
        1. Getting started with the Data Server as a DLL
        2. Referencing the Data Server as a DLL
        3. Implementing the API controller
        4. Implementing the server filter
        5. Implementing the custom parser
        6. DLL configurations reference
        7. The controller's methods for request handling
      7. The Data Server as a console application
        1. Installing the Data Server as a console application
        2. Configurations reference
        3. Data sources guide
        4. Security and authorization guide
      8. Troubleshooting the Data Server
    6. MongoDB
      1. Introduction to Flexmonster MongoDB Connector
      2. Getting started with the MongoDB Connector
      3. Embedding the MongoDB Connector into the server
      4. Configuring the MongoDB Connector
    7. Microsoft Analysis Services
      1. Connecting to Microsoft Analysis Services
      2. Getting started with Flexmonster Accelerator
      3. Referencing the Accelerator as a DLL
      4. Configuring the authentication process
      5. Configuring a secure HTTPS connection
      6. Troubleshooting
    8. Custom data source API
      1. Introduction to the custom data source API
      2. A quick overview of a sample Node.js server
      3. A quick overview of a sample .NET Core server
      4. Implement your own server
        1. Implementing the custom data source API server
        2. Implementing filters
        3. Supporting more aggregation functions
        4. Supporting multilevel hierarchies
        5. Returning data for the drill-through view
        6. Testing your custom data source API server
    9. Elasticsearch
      1. Connecting to Elasticsearch
      2. Configuring the mapping
    10. Pentaho Mondrian
      1. Connecting to Pentaho Mondrian
      2. Getting started with the Accelerator
      3. Configuring Mondrian roles
      4. Configuring username/password protection
      5. Configuring a secure HTTPS connection
      6. Troubleshooting
    11. Connecting to other data sources
  5. Accessibility
    1. Accessibility overview
    2. Keyboard navigation
  6. Configuring report
    1. What is a report
    2. Data source
    3. Slice
    4. Options
    5. Mapping
    6. Number formatting
    7. Conditional formatting
    8. Set the report for the component
    9. Get the report from the component
    10. Share the report
    11. Date and time formatting
    12. Configuring global options
    13. Export and print
    14. Calculated values
    15. Custom sorting
  7. Charts
    1. Available tutorials
    2. Flexmonster Pivot Charts
    3. Integration with Highcharts
    4. Integration with amCharts
    5. Integration with Google Charts
    6. Integration with FusionCharts
    7. Integration with any charting library
  8. Customizing
    1. Available tutorials
    2. Customizing the Toolbar
    3. Customizing appearance
    4. Customizing the context menu
    5. Customizing the grid
    6. Customizing the pivot charts
    7. Localizing the component
  9. Security
    1. Security in Flexmonster
    2. Security aspects of connecting to an OLAP cube
      1. Ways of connecting to an OLAP cube
      2. The data transfer process
      3. Data security
      4. Data access management
  10. Updating to the latest version
    1. Updating to the latest version
    2. Release notes
    3. Migration guide from 2.8 to 2.9
    4. Migration guide from 2.7 to 2.8
    5. Migration guide from 2.6 to 2.7
    6. Migration guide from 2.5 to 2.6
    7. Migration guide from 2.4 to 2.5
    8. Migration guide from 2.3 to 2.4
    9. Migration guide from 2.2 to 2.3
  11. Flexmonster CLI Reference
    1. Overview
    2. Troubleshooting the CLI
    3. flexmonster create
    4. flexmonster add
    5. flexmonster update
    6. flexmonster version
    7. flexmonster help
  12. Documentation for older versions
Table of contents

Security and authorization guide

This tutorial describes how to configure the data access security in Flexmonster Data Server used as a Windows/Unix service. To connect the Data Server to your data, refer to the Data sources guide. To install the Data Server as a service, see the Getting started with the Data Server guide.

Flexmonster Data Server supports different essential security configurations, such as built-in basic authorization and HTTPS. To learn more about security configurations in the Data Server, see the following guides:

Built-in basic authorization

By default, Flexmonster Data Server is accessible to anyone who can reach its host. Using the built-in basic authorization, you can restrict access to Flexmonster Data Server.

Step 1. Create a user

Open Flexmonster Admin Panel and go to Security > Add New User. Define a username and password, then select Create to add the user.

Once a user is created, you cannot change the username.

Learn more about managing the users in our guide on the Admin Panel.

Step 2. Enable authorization

Go to the Settings tab. Turn on the basic authorization using the Basic auth toggle switch:

Step 3. Configure CORS

Basic Authorization requires certain origins to be defined in the Access-Control-Allow-Origin header. Origin is a domain that sends requests to Flexmonster Data Server (e.g., http://localhost:8080 or https://example.com).

To specify origins that can send requests to the Data Server, fill in the Allow origin input field on the Settings tab.

To specify several origins, separate them with a comma:

Step 4. Configure credentials on the client side

In this step, credentials are configured in Flexmonster Pivot. There are two ways to configure credentials:

  1. Use the withCredentials property:
    {
    dataSource: {
            type: "api",
            url: "http://localhost:9500",
            index: "data",
    withCredentials: true
        }
    }
    In this case, you need to enter your login and password when first connecting to Flexmonster Data Server.
  2. Add a request header with basic authentication. The header should be added in the following way:
    {
        dataSource: {
            type: "api",
            url: "http://localhost:9500",
            index: "data",
    requestHeaders: {
    "Authorization": "Basic QWxhZGRpbjpPcGVuU2VzYW1l"
    }
        }
    }

    The header should be specified in the standard for basic authentication format.
    In this case, the authorization will be automatic, and the browser will not ask for the login and password.

Configure the HTTPS protocol

All data sent by HTTP is not encrypted and can be inspected. To make the Data Server more secure, we added an option to enable the HTTPS protocol. Follow the steps below to configure a secure HTTPS connection.

Step 1. Enable the HTTPS protocol

Open Flexmonster Admin Panel and go to the Settings tab. Turn on HTTPS using the HTTPS toggle switch:

Step 2. (optional) Add a certificate

If needed, you can also add an SSL/TLS certificate. There are two ways to add a certificate:

  • By specifying its path and password.
  • By specifying its subject and store.

Path and password

To add a certificate using its path and password, follow these steps:

  1. On the Settings tab, set the Certificate type configuration to Path-Password.
  2. Specify the path to the certificate and the password required to access it. You can click on the folder icon to choose the needed certificate using Explorer.

Adding the certificate is possible only when HTTPS is enabled.

Your configuration should look similar to the following:

Subject and store

To add a certificate using its subject and store, follow these steps:

  1. On the Settings tab, set the Certificate type configuration to Subject-Store.
  2. Specify the certificate subject name and the certificate store from which to load the certificate.
  3. (optional) By default, the location of the certificate store is Current User. If the needed location is Local Machine, select this option in the Location configuration.
  4. (optional) To allow using invalid certificates, such as self-signed certificates, enable the Allow invalid toggle button.

Adding the certificate is possible only when HTTPS is enabled.

Your configuration should look similar to the following:

Step 3. (optional) Configure the protocols

The Protocols configuration establishes the HTTP protocols enabled on a connection endpoint or for the server. The Protocols configuration can have one of the following values: HTTP1, HTTP2, and HTTP1 and HTTP2. For example:

Reverse proxy authorization

If you need to use your own authorization mechanism, you can restrict the public access to Flexmonster Data Server and enable access to it through the reverse proxy. This approach requires implementing the proxy, which is responsible for the data access control. The proxy will decide which requests should be accepted and passed to the Data Server, and which requests should be declined.

The proxy has to implement the custom data source API to handle requests from Flexmonster Pivot. Then the proxy will be able to redirect Flexmonster Pivot’s requests to the Data Server. To see the full list of requests sent by Flexmonster Pivot, refer to our documentation.

Custom authorization and role-based permissions

Role-based access is supported when using Flexmonster Data Server as a DLL. Flexmonster.DataServer.Core.dll allows performing server-side filtering, so it becomes possible to show different subsets of the data to different user groups.

To demonstrate the usage of server-side filtering for role-based permissions, we created an ASP.NET application with a custom server using Flexmonster.DataServer.Core.dll.  The GitHub repository contains a solution file DemoDataServerCore.sln, so the sample can be opened and launched via Visual Studio.

To start the sample application from the console, run the following commands:

cd DemoDataServerCore
dotnet restore
dotnet run

To see the result, open http://localhost:5000/ in the browser.

On the page, there is the pivot table and the drop-down menu. Select a role from the menu to see how it affects the data shown in Flexmonster.

To see how the server-side filtering is implemented in the sample server, refer to the FlexmonsterAPIController.cs file.

To learn more about the server filter, see the Implementing the server filter guide.

Secure configuration setting

To store connection strings and other configurations more securely, you can set them dynamically as command-line arguments or environment variables. This approach requires using the Data Server as a console application. For details on passing dynamic configurations to the Data Server, see the documentation.

What’s next?

You may be interested in the following articles: