Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hi Friends,
In my qlikview application, I have 3 sheets (Home,sheet1, sheet2).
And have text 3 objects with action to navigate between the sheets.
Access requirement is as follows:
Home - all LDAP_GROUP1 and LDAP_GROUP2
sheet1 - only LDAP_GROUP1
sheet2 - only LDAP_GROUP2
LDAP_GROUP1- users | LDAP_GROUP2-users |
---|---|
1216 | 1216 |
1217 | 1220 |
1219 | 1221 |
How can we write section access code to get this restrictions for LDAP groups.
Thanks
Gireesh
May be
Thanks For Ur Reply
But My question is "restrictions for LDAP groups"
LDAP groups already created and available in QMC Distibution service.
we want security based on LDAP groups.
I am not much expertise in Server AON. may be marcus_sommer pcammaert
I think it should work if you just specify the groups by NTNAME, like:
section access;
Access:
load * inline [
ACCESS, NTNAME
ADMIN, ADMINUSER
USER, LDAP_GROUP1
...
- Marcus
Thanks Marcus Sommer,
The above script working fine in my local system.
But not working in access point if "strict exclusion" is checked in document. Getting following error while opening dashbaord.
Error: Failed to open document. You don't have access to this documnet.
If "strict exclusion" is unchecked, the restictions are not applied in the dashboard and showing all data.
-Gireesh
This meant that something isn't correct with your section access implementation and in the end strict exclusion is mandatory because otherwise it's just a kind of usability and not really secure.
I have never implemented section access on sheet/object-level else only to data. Therefore I suggest that you used some small dummy-application and building and extending the section access step by step whereby I would leave out at first the object-level and just restrict some data.
Quite important is to check how the user is authenticated - just osuser() within a textbox will do it - and to give attention to such things like not to load the section access optimized from a qvd and to put all the values in upper() and similar. Here you will find various links to quite useful resources: Section Access.
- Marcus