Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 
Anonymous
Not applicable

data security in qlik sense

Hi,

can you help me with data security/hide on country wise

table1

No Country

1   India

2   Eng

thanks

14 Replies
petter
Partner - Champion III
Partner - Champion III

You should use "section access" to get the kind of security you need:

The general help for section access:

https://help.qlik.com/en-US/sense/2.1/Subsystems/Hub/Content/Scripting/Security/manage-security-with...

The more specific example - which is called dynamic data reduction:

https://help.qlik.com/en-US/sense/2.1/Subsystems/Hub/Content/Scripting/Security/dynamic-data-reducti...

So applied to your example it might look like this:

SECTION ACCESS;     // Starts the special section of the load script where access is defined

LOAD * INLINE [

ACCESS, USERID,COUNTRY    

USER, AD_DOMAIN\ADMIN,*

USER, AD_DOMAIN\A, India

USER, AD_DOMAIN\B, Eng

USER, AD_DOMAIN\C, India

USER, INTERNAL\SA_SCHEDULER,*

];


SECTION APPLICATION; // Starts the section which is the regular or normal load script part

table1:

LOAD *,

  Country AS COUNTRY;

LOAD * INLINE [

No, Country

1, India

2, Eng

];


More links:

Anonymous
Not applicable
Author

let's assume that Country table having 10 lacs records  then why we have to load inline

for an example: select * from country where country -'Eng' this kinds data security is  expected

why this inline condition ?

SECTION APPLICATION; // Starts the section which is the regular or normal load script part

table1:

LOAD *,

  Country AS COUNTRY;

LOAD * INLINE [

No, Country

1, India

2, Eng

];


and will this conditon sufficient to restrict the data for the particular user

SECTION ACCESS;     // Starts the special section of the load script where access is defined

LOAD * INLINE [

ACCESS, USERID,COUNTRY   

USER, AD_DOMAIN\ADMIN,*

USER, AD_DOMAIN\A, India

USER, AD_DOMAIN\B, Eng

USER, AD_DOMAIN\C, India

USER, INTERNAL\SA_SCHEDULER,*

];


finally can we use group instead of User

petter
Partner - Champion III
Partner - Champion III

It is purely an example so you can see the data involved. You replace the INLINE part of the load with either a FROM or most likely a following SQL statement...

Anonymous
Not applicable
Author

I wanted under how this security will work via first inline statement and 2nd normal normal load table or how

Anonymous
Not applicable
Author

I wanted under how this security will work via first inline statement and 2nd normal load table or how

Anonymous
Not applicable
Author

I wanted understand how this security will work via first inline statement and 2nd normal load table or how

petter
Partner - Champion III
Partner - Champion III

Look at the second link in my first answer and read the documentation to understand if you find my example insufficient.

Anonymous
Not applicable
Author

it is row level security what about data level

Anonymous
Not applicable
Author

Suggestion please