Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!
Hello!
I'm trying to figure out flaws in the following approach. If a Power BI report is published to web, but the link is not shared with anyone, and instead the report is embedded on Sharepoint (which requires login), isn't the report secure then? Publish to web reports aren't indexed, and while technically the report doens't require any authentication, how can anyone find it without having a link?
Please help me figure this out.
Thanks.
Absolutely not secure. That URL is discoverable by the wider internet. Even if you don't publicise the URL, it can still be found.
That is my assumption, but what is the mechanism? Plugging in random numbers? How can it be discoverable?
Couldn't help you with the how, thats a better question for a black hat. URL discovery is quite an old security issue for the internet more generally. The how almost doesn't matter. If you have a public URL, always assume everyone has access to it and all of the information on that site is available to even your worst enemy.