cube-js / cube-js/cube

Option to hide the few critical information from the cube response like dataSource, dbType and extDbType

Open
#7,702 0 comments 0 reactions 0 assignees View on GitHub
api:rest
Dominant language
Rust
Stars
20.8k
Forks
2.1k
Avg merge
1d 2h
Merged PRs (30d)
181

Description

There should be an option to hide critical information from the response like:

` "dataSource": "default",
"dbType": "mysql",
"extDbType": "cubestore",`

**Why do we need to hide?**

Hiding specific information from a response, such as "dataSource," "dbType," and "extDbType," might be done for security or privacy reasons. Revealing certain details about the data source, database type, or external database type could potentially expose sensitive information to unauthorized users.

**Here are some reasons why you might want to hide this information:**

1. **Security**: Disclosing technical details about the data source and database might provide insights into the underlying infrastructure. For security reasons, it's often advisable to limit the exposure of such details to prevent potential vulnerabilities.
2. **Privacy:** Details like the database type and external database type may contain proprietary or internal information that the organization prefers to keep confidential. Limiting the visibility of these details helps protect the privacy of the organization's technology stack.
3. **Best Practices**: Following best practices for information disclosure in responses. It's common to provide only the necessary information in API or system responses to reduce the risk of information leakage.

**Alternatives solution considered**
If any cube user wants to use this information they can use using environment variables.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.