> Documentation index: https://www.gooddata.ai/docs/gooddata-ui/llms.txt lists every page of these docs as Markdown.

# ISecuritySettingsService

- Package: [@gooddata/sdk-backend-spi](https://www.gooddata.ai/docs/gooddata-ui/latest/api-reference/sdk-backend-spi/index.md)
- Kind: interface
- Source: https://github.com/gooddata/gooddata-ui-sdk/blob/rel/11.64/libs/sdk-backend-spi/src/organization/securitySettings/index.ts

This service provides access to security settings defined on backend.

**Signature:**

```typescript
export interface ISecuritySettingsService 
```

## Properties

| Property | Modifiers | Type | Description |
| --- | --- | --- | --- |
| [scope](https://www.gooddata.ai/docs/gooddata-ui/latest/api-reference/sdk-backend-spi/sdk-backend-spi.isecuritysettingsservice/index.md#isecuritysettingsservicescope) | `readonly` | string | The scope in which is security settings accessed (URI of organization, workspace, user profile). |

## Methods

| Method | Description |
| --- | --- |
| [isDashboardPluginUrlValid(url, workspace)](https://www.gooddata.ai/docs/gooddata-ui/latest/api-reference/sdk-backend-spi/sdk-backend-spi.isecuritysettingsservice/index.md#isecuritysettingsserviceisdashboardpluginurlvalid) | Validate plugin URL against list of allowed hosting locations. |
| [isUrlValid(url, context)](https://www.gooddata.ai/docs/gooddata-ui/latest/api-reference/sdk-backend-spi/sdk-backend-spi.isecuritysettingsservice/index.md#isecuritysettingsserviceisurlvalid) | Validate URL against backend list of allowed URLs. |

## Property details

### ISecuritySettingsService.scope

The scope in which is security settings accessed (URI of organization, workspace, user profile).

**Signature:**

```typescript
readonly scope: string;
```

## Method details

### ISecuritySettingsService.isDashboardPluginUrlValid()

Validate plugin URL against list of allowed hosting locations.

**Signature:**

```typescript
isDashboardPluginUrlValid(url: string, workspace: string): Promise<boolean>;
```

#### Parameters

| Parameter | Type | Description |
| --- | --- | --- |
| url | string | plugin content URL |
| workspace | string | workspace in context of which the validation is done |

**Returns:**

Promise&lt;boolean&gt;

#### Remarks

Dashboard plugins MUST be loaded only from allowed locations. If the plugin is hosted elsewhere, it MUST NOT be loaded.

### ISecuritySettingsService.isUrlValid()

Validate URL against backend list of allowed URLs.

**Signature:**

```typescript
isUrlValid(url: string, context: ValidationContext): Promise<boolean>;
```

#### Parameters

| Parameter | Type | Description |
| --- | --- | --- |
| url | string | URL for validation. |
| context | [ValidationContext](https://www.gooddata.ai/docs/gooddata-ui/latest/api-reference/sdk-backend-spi/sdk-backend-spi.validationcontext/index.md) | context in which the URL must be valid. |

**Returns:**

Promise&lt;boolean&gt;

promise with boolean: true when validated URL is allowed as external host, false if it is not.
