@RealGene it's not an auth issue though. there's issues with sites not managing their file and data sources properly so it's falling foul of the cross site scripting protections