Using Section Access With LDAP

[gireesh1216]

Hi Friends,

In my qlikview application, I have 3 sheets (Home,sheet1, sheet2).

And have text 3 objects with action to navigate between the sheets.

Access requirement is as follows:

Home - all LDAP_GROUP1 and LDAP_GROUP2

sheet1 - only LDAP_GROUP1

sheet2 - only LDAP_GROUP2

LDAP_GROUP1- users	LDAP_GROUP2-users
1216	1216
1217	1220
1219	1221

How can we write section access code to get this restrictions for LDAP groups.

Thanks

Gireesh

[Anil_Babu_Samineni]

May be

Sheet Level Security.qvw

Sheet level access

[gireesh1216]

Thanks For Ur Reply

But My question is "restrictions for LDAP groups"

LDAP groups already created and available in QMC Distibution service.

we want security based on LDAP groups.

[Anil_Babu_Samineni]

I am not much expertise in Server AON. may be marcus_sommer‌ pcammaert

[marcus_sommer]

I think it should work if you just specify the groups by NTNAME, like:

section access;

Access:

load * inline [

ACCESS, NTNAME

ADMIN, ADMINUSER

USER, LDAP_GROUP1

...

- Marcus

[gireesh1216]

Thanks Marcus Sommer,

The above script working fine in my local system.

But not working in access point if "strict exclusion" is checked in document. Getting following error while opening dashbaord.

Error: Failed to open document. You don't have access to this documnet.

If "strict exclusion" is unchecked, the restictions are not applied in the dashboard and showing all data.

-Gireesh

[marcus_sommer]

This meant that something isn't correct with your section access implementation and in the end strict exclusion is mandatory because otherwise it's just a kind of usability and not really secure.

I have never implemented section access on sheet/object-level else only to data. Therefore I suggest that you used some small dummy-application and building and extending the section access step by step whereby I would leave out at first the object-level and just restrict some data.

Quite important is to check how the user is authenticated - just osuser() within a textbox will do it - and to give attention to such things like not to load the section access optimized from a qvd and to put all the values in upper() and similar. Here you will find various links to quite useful resources: Section Access.

- Marcus