The Terracotta Management Console allows you to execute SQL-like queries in the query field of the Application Data > Contents panel. Initially, all users who can access the TMC can also use this query feature.

You may want to restrict the usage of the query feature by disabling it for certain user roles/identities. You can do this as follows:

If you are using simple account-based authentication security, the authorization setup for disabling the query feature is defined in the security.ini file, which is located in the mgmt folder under your user account path at the operating system level. The file is created when you use the TMC to specify that you want to use Ini-File authentication. If you have not yet done so, you can use the Settings menu of TMC to specify the required authentication method. On Windows systems, the location of the mgmt folder could be, for example, C:\Users\MyUserName\.tc (where MyUserName is your Windows user name), and on Linux it could be ~/.tc.

Use the following steps to disable the query feature:

Here is an example of security.ini, with nobmsql applied to the "operator" user:

There are 2 users in this configuration: "admin" and "operator". The long string behind '=' is the encrypted password, which is automatically generated the first time you configure the password through TMC. Currently there are 3 roles available: "admin", "operator" and "nobmsql". An administrator user needs to be assigned both "admin" and "operator" roles. An operator user needs to be assigned the "operator" role. If you want to hide the query panel from the administrator user or operator user or both, you can simply add the "nobmsql" role to that user.

If you are using LDAP based security, use the following steps to disable the query feature for a particular user: