article Sheets Security with Section Access File in Member Articles

Sheets Security with Section Access File

Carlos_Reyes — Fri, 07 Oct 2022 13:25:47 GMT

If you're already using Section Access to filter data, you have too many users and/or sheets to use the MATCH() method, or if you just need to handle those privileges outside of the .qvw ( e.g. a user will maintain an excel file), you can use/reuse Section Access to accomplish this requirement.

In this example I use INLINE loads in order to allow other people to reload the app, however you could load all tables, including the SECTION ACCESS table, from xls or qvd files.

Go to the following document to learn how to test this example:

Sheets Security with Section Access

Re: Sheets Security with Section Access File

datanibbler — Tue, 08 Jul 2014 07:27:47 GMT

Dito! Thanks for sharing this!

Security is a much-too-often-underestimated aspect, particularly when there are time constraints - performance, ease-of-use and the speed of development are commonly valued more highly ... until someone notices that the data is not secured and starts asking questions.

Just one addition (though it should be known) - the SECTION_ACCESS should generally be stored in a hidden script_part and the display of the log_execution_status for this hidden_script should be deactivated ("security" tab of the document_´properties).

To add extra layers of security, the SECTION_ACCESS table can be stored in an Excel file, like you said, and that can be in a folder that only yourself and whichever user your server uses to reload the apps have access to - I have such a folder for personell data. There is a special username we have on the server for the QV_Server to reload the apps, that has access to this folder, and myself - no one else.

Best regards,

DataNibbler

Re: Sheets Security with Section Access File

Fri, 13 Mar 2015 19:28:10 GMT

HI, I was trying to use your example.

Here is the code:

SECURITY:

LOAD * INLINE [

ACCESS, NTNAME, USER, COUNTRY

ADMIN, ADMIN\1594,

USER, ADMIN\1594499, 1594499,

USER, ADMIN\PRUEBA2, PRUEBA2, MEXICO

USER, ADMIN\PRUEBA2, PRUEBA2, USA

];

Section Application;

/* CHANGE THE NTNAME AND USER VALUES TO REFLECT YOUR OWN USERS */

SHEET_ACCESS:

LOAD * INLINE [

USER, SHEET1, SHEET2

1594499, 1, 0

PRUEBA2, 0, 0

];

I log in as ADMIN\1594499 . If my sheet_access looks like above I can see only SHEET 1 as expected.

However if I change the last line to

PRUEBA2,

I can see both sheets

Any ideas??

Re: Sheets Security with Section Access File

brijesh1991 — Wed, 18 Nov 2015 16:26:23 GMT

Facing the same issue; can you please let me know if you have resolved this?

Re: Sheets Security with Section Access File

jaimeaguilar — Tue, 05 Jan 2016 23:54:54 GMT

Hi,

you have to make sure that the option "Initial Data reduction based on section access" is enabled, in order to make this example work. This option is inside Document Properties > Opening.

Also, you have to test this example as a USER, otherwise you'll see all the tabs because you're logging as ADMIN,

regards