KNOWLEDGE BASE

Static Content Accessible Without Login


Published: 07 Jan 2016
Last Modified Date: 17 Mar 2017

Issue

Some non-sensitive static content (thumbnails, PDFs, PNGs, etc) is accessible without having to log in to Tableau Server. An example is the URL http://<Tableau Server>/images/30x30REV.gif 

Environment

Tableau Server

Resolution

Our Security team have responded regarding static Tableau Server content being accessible without login. This behaviour is by design and is required for guest access to Tableau Server. When Tableau serves embedded content to guest users, some of these assets are used, so to be able to have guest access enabled, these need to be available without authentication.

Additional Information

Technically these URLs are for use by Tableau Server internal calls and are not meant to be accessed directly by users.
Did this article resolve the issue?