Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW
cancel
Showing results for 
Search instead for 
Did you mean: 
dilip1234
Creator
Creator

Section access is not working as expected : Need help

Hi All,

I am new to section access in Qlik sense.

I have following 3 tables with sample data:

Geo Table

GeoNameDocumentStatusSales
IndiaCompleted1400 INR
USAIncomplete2000 INR
CanadaCompleted4500 INR
ANZCompleted1500 INR
RussiaIncomplete2500 INR

Zone Table

ZoneNameDocumentStatusSales
SouthCompleted1400 INR
NorthIncomplete2000 INR
EastCompleted4500 INR
WestCompleted1500 INR
CentralIncomplete2500 INR

Country Table

CountryNameDocumentStatusSales
IndiaCompleted1400 INR
USAIncomplete2000 INR
CanadaCompleted4500 INR
AustraliaCompleted1500 INR
UKIncomplete2500 INR

Now I am showing these table information on map through geo-analytics as below.

GeoMap.PNG

Now when anyone logged on Qlik sense, then only logged in user associated records should get display.

e.g. Permission Matrix is as below:

UserNamePermissionTypeValue
dir\jeevaGeoIndia
dir\jeevaGeoCanada
dir\prasadZoneSouth
dir\prasadCountryIndia

As per above matrix when JEEVA logged in the qlik sense, he should see Geo (India and Canada), he should not see other geo, zone or countries.

My Section access query is as below:

SECTION ACCESS;

LOAD * INLINE

[

     ACCESS, NTNAME, GROUP, GEONAME

     USER, DIR\PRASAD, *, INDIA

     USER, DIR\JEEVA, *, INDIA

];

But when JEEVA is not logged in the Qlik sene, he is getting ACCESS DENIED issue.

Can anyone help me with this issue, might I am doing something wrong with section access script.

Thanks

Dilip Solanki

Thanks
Dilip Solanki
25 Replies
Lauri
Specialist
Specialist

Don't all usernames need to be upper case too?

SECTION APPLICATION;

LOAD

    Upper(USERID) as USERID,

     SA_GEONAME AS GEONAME

RESIDENT SA;

dilip1234
Creator
Creator
Author

Ok. So you mean in my GeoTable, I do not have GeoName field name in uppercase. It should be GEONAME in GeoTable? Is that you are saying?

Thanks
Dilip Solanki
dilip1234
Creator
Creator
Author

Hi John,

Thanks for your answer.

I am trying this section access on Qlik Sense Desktop, but it will not work in Qlik Desktop. So I have imported my app on Qlik server but not published. So I am loading data in my application from "Load Data" button in data load editor.

So now if required then where can I enter INTERNAL\SA_SCHEDULER as you have suggested?

Thanks
Dilip Solanki
dilip1234
Creator
Creator
Author

Hi All,

I want to know one thing, that how section access works?

1. First all 3 tables (which I have mentioned in my question) data will be loaded.

2. Then column GEONAME, will linked with logged in user section access details. e.g. If Jeeva is logged in and Jeeva have only INDIA geo access, then only India Geo related records will be loaded from first step or how it will works?

I am just trying to understand the section access internal so might it could help me to resolve my concern.

Thanks all for suggestion so far.

Thanks
Dilip Solanki
gabriel_as
Contributor III
Contributor III

dilip1234
Creator
Creator
Author

Hi Gabriel,

Seems this link is no longer available.

Not Found

The item does not exist. It may have been deleted.


Thanks

Dilip Solanki

Thanks
Dilip Solanki
gabriel_as
Contributor III
Contributor III

In summary it is something like this:

It turns out that I want to show data according to who registers through Section Access, I do it in 2 ways:

Method 1

Section Access;

LOAD * INLINE [

     ACCESS, USERID, PASSWORD, supCYC

     ADMIN, ADMIN, 1007, NOREDUCTION

     USER, USER1, 1256, SUPERVISOR1

];

Section Application;

 

Method 2

LOAD * INLINE [

     ACCESS, USERID, PASSWORD,% SUPERVISOR

     ADMIN, ADMIN, 1007, NOREDUCTION

     USER, USER1, 1256, SUPER1

];

Section Application;

LOAD * INLINE [

     SUPCYC,% SUPERVISOR

     SUPERVISOR1, SUPER1

];

Both methods show the correct information when opening my qvw as USER1 but when reloading the restriction is lost and it shows the data of all the supervisors and not only of the SUPERVISOR1

What do I do wrong or what should I do so that when I recharge I do not miss the reduction?

NOTE:

In Configurations - Document Properties - When Open, the boxes Initial Reduction ... and Strict Exclusion are selected

The right answer:

Section Access applies ONLY after the document is closed and reopened. You as administrator can reload the document and you will see all the values because you do not apply Section Access yet. When you save the document, close it and open it, Qlikview determines that the user tries to open the document and then applies security.

Qlikview knows that if you can upload the document, then you have access to the data and therefore you can see everything.

regards.

dilip1234
Creator
Creator
Author

Hi Sasidhar,

Thanks for your answer.

I have done the way you have suggested, but I am afraid its not working.

When I am logged in on Qlik sense server I am getting below details:

Directory/Domain: DIR

UserId: dilip.solanki

Then how it should placed in USERID column of section access?

DIR\DILIP.SOLANKI

OR

DILIP.SOLANKI

Thanks

Dilip Solanki

Thanks
Dilip Solanki
agigliotti
Partner - Champion
Partner - Champion

yes that's right.

agigliotti
Partner - Champion
Partner - Champion

you should use in the format of DIR\DILIP.SOLANKI