# Allow "everyone" access to data explorer query doesn't work

**URL:** https://meta.discourse.org/t/allow-everyone-access-to-data-explorer-query-doesnt-work/160292
**Category:** Data & reporting
**Tags:** sql-query
**Created:** [August 9, 2020, 9:26pm UTC](https://meta.discourse.org/t/allow-everyone-access-to-data-explorer-query-doesnt-work/160292 "2020-08-09T21:26:26Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![mcwumbly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mcwumbly/32/103861_2.png) [@mcwumbly](https://meta.discourse.org/u/mcwumbly)
#### Post date: [August 9, 2020, 9:26pm UTC](https://meta.discourse.org/t/allow-everyone-access-to-data-explorer-query-doesnt-work/160292/1 "2020-08-09T21:26:26Z")

</div>

If you select “everyone” as a group that can access a given [data explorer](https://meta.discourse.org/t/32566?silent=true) query, it doesn’t complain. You can then get the link to access that query on the page that lists the queries, and it is in the form: [https://my.forum.domain/g/everyone/reports/43](https://my.forum.domain/g/everyone/reports/43)

But if you try to visit that link you just get “something went wrong.”

Trust level 0 does work, so guessing this response also applies here:

> [@Assign topics to non-staff users](https://meta.discourse.org/t/assign-topics-to-non-staff-users/103419/26):
>
> Trust level 0 should work though? We should certainly make everyone unselectable in the site setting, the everyone group is a bit weird

---

<div class="post-metadata">

### Author: ![IAmGav](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/iamgav/32/235598_2.png) [@IAmGav](https://meta.discourse.org/u/IAmGav)
#### Post date: [August 9, 2020, 9:28pm UTC](https://meta.discourse.org/t/allow-everyone-access-to-data-explorer-query-doesnt-work/160292/2 "2020-08-09T21:28:51Z")

</div>

why would you want to give everyone access to your database, such a security risk

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [August 9, 2020, 9:30pm UTC](https://meta.discourse.org/t/allow-everyone-access-to-data-explorer-query-doesnt-work/160292/4 "2020-08-09T21:30:19Z")

</div>

To me the request is about removing a quirk from the UI. If it is broken don’t show it

---

<div class="post-metadata">

### Author: ![mcwumbly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mcwumbly/32/103861_2.png) [@mcwumbly](https://meta.discourse.org/u/mcwumbly)
#### Post date: [August 9, 2020, 9:33pm UTC](https://meta.discourse.org/t/allow-everyone-access-to-data-explorer-query-doesnt-work/160292/5 "2020-08-09T21:33:13Z")

</div>

what sam said…

in my case, it’s a login required site. i’m designing the query. queries are read only already per the design of the plugin.

so i see it as just a cheap way to expose some data otherwise not readily available in the UI. another approach would be to jam the same query into a dedicated plugin and then install that plugin…

but if i’m missing something here from the security perspective, i’m still listening.

---

<div class="post-metadata">

### Author: ![RickyC0626](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rickyc0626/32/185743_2.png) [@RickyC0626](https://meta.discourse.org/u/RickyC0626)
#### Post date: [October 7, 2020, 2:16am UTC](https://meta.discourse.org/t/allow-everyone-access-to-data-explorer-query-doesnt-work/160292/7 "2020-10-07T02:16:00Z")

</div>

[https://github.com/discourse/discourse-data-explorer/pull/59](https://github.com/discourse/discourse-data-explorer/pull/59)

All good, group `everyone` does not show up but `trust_level_0` can be used to the same effect.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [November 6, 2020, 2:16am UTC](https://meta.discourse.org/t/allow-everyone-access-to-data-explorer-query-doesnt-work/160292/8 "2020-11-06T02:16:15Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
