SQL query parameters can be given values on the server in the onBeginProcessData event — the values never reach the client.

Set a parameter value in the data event.
def beginProcessData(args: StiDataEventArgs):
    if args.dataSource == 'customers' and len(args.parameters) > 0:
        args.parameters['Country'].value = 'Germany'

viewer.onBeginProcessData += beginProcessData

How it works. Parameter values are applied on the server, so query filters stay confidential and are not exposed to the client.

Hi. Need any help?