Access point / Security problem - Qlik Community

Report Inappropriate Content · ‎2015-03-25

Hi,

We are maintaining access for our dashboards through AD groups.

When testing with a account which is not added to any of qlikview related AD groups , we found that some dashboards are appearing in the access point for this profile. What could be the reason and how to fix this problem ?

Report Inappropriate Content · ‎2015-03-26

Do you have any "Admin" level AD groups ?

And, could that Admin level group have access to the qlikview server as Admin ?

It's possible then that the member could be part of that "Admin" group and therefore, have access whilst not having been granted permission.

The other option (though not 100% sure) - the users concerned haven't got a Named CAL by any chance ?

If neither of these two, then it's probably something your IT Helpdesk/AD Group specialists would need to investigate as to me, something isn't very secure on your network.

Report Inappropriate Content · ‎2015-03-26

yes we do have admin level AD groups but this account is no way related to them.

I'm not sure of root cause and still investigating

simsondevadoss · ‎2015-03-27

Please check whether user or AD group is added in the Windows security .

awhitfield · ‎2015-03-27

Hi VR,

you said only 'some' dashboards are visible to this user, so you need to compare what's different, security wise, between one that's visible and one that's not.

Andy

luciancotea · ‎2015-03-27

QlikView -> Open document -> Settings -> Document -> Properties -> Server -> Filter AccessPoint Document List Based on Section Access

Report Inappropriate Content · ‎2015-03-27

in one environment what you said is true and it worked by comparison.. the issue is with folder permissions . There is read access for everyone on that folders and so the files in them are visible to everyone .

For other environment, there is no issue with permissions , but the test user is able to see ALL the dashboards.

any suggestions ?

Report Inappropriate Content · ‎2015-03-27

no.. this user is not part of any AD groups

Report Inappropriate Content · ‎2015-03-27

i think it's not the problem.. on one environment after making changes to folder permissions the incident is fixed. no dashboards are visible to test account.

in another environment all the documents are visible . any suggestions ?

simsondevadoss · ‎2015-03-28

check whether you have shared the that folder and given folder permissions to everyone ?

or

in Qmc, whether you have given the distribution as "All Authenticated Users "