Security Policy

The security policy is a security control applied to all users in the system, and only the system administrator can configure it.

Open the Settings->Security Management->Security Policy page.

Login Security Policy

Enable Complex Passwords

After enabling, users must enter a complex password that meets the requirements when changing their password.

Password Expires in 90 Days

The password is valid for 90 days. After 90 days, users will be required to change their password upon login.

Enable Image Verification

After enabling this feature, users will need to enter a verification code based on the image when logging in.

Session Timeout Duration

Users can configure the session timeout duration based on their business scenarios. When the system remains inactive for the configured duration, it will automatically log out and redirect to the login page.

The timeout duration can be set within the range of 1 to 168 hours, with the default being 36 hours.

By default, when the session timeout duration is configured, the system backend will use this setting to determine the validity period of each session. However, the timeout duration for cookies in the browser remains relatively long. If you need the session to immediately expire when all browser tabs are closed, you can achieve this by setting the environment variable SESSION_COOKIE_MAX_AGE = -1 to a negative value.

Data Privacy Protection

Allow Data Export

Enabled by default, allowing users to export or email dataset data, chart detail data, and aggregated result data. You can configure which users are allowed to export data and which users are not allowed to export data.

When disabled, no users will be able to export data, and email push will not send the chart's Excel aggregated result data.

This feature is designed to prevent users from exporting data without authorization.

Export Row Limit

The row limit is designed to allow users to export sample data but not all or large amounts of data, to prevent massive data leakage.

Due to Excel's inherent limitations, exported files cannot exceed 10 million rows or 2 billion cells. Therefore, the number of rows can only be set between 1 and 10,000,000.

Tip

Each sheet in the exported file has a maximum limit of 1 million rows. If the exported file exceeds 1 million rows, the excess rows will be stored in the next sheet, and so on. For example, if a file contains 3.5 million rows of data, the exported file will be divided into 4 sheets.

Enable Watermark Protection

After enabling the watermark, you can see the watermark on any page of the system.

Additionally, when users export PDF/PPT/PNG files, the exported files will also contain the watermark.

Enable HMAC Signature Protection

This key is used to protect filter conditions in public links, ensuring that the filter conditions cannot be modified. Once this key is leaked, users can use the HMAC key to encrypt filter conditions, thereby querying any data.

For more details, see HMAC Signature Protection in the application settings.