article Mask or de-identify data for certain users using Section Access in Member Articles

Mask or de-identify data for certain users using Section Access

mnu — Fri, 07 Oct 2022 13:31:44 GMT

In many industries including education and healthcare, it is necessary to mask or de-identify certain sensitive fields for certain user groups but also be able to see the data in total for the purposes of comparison or benchmarking.

This can be achieved by setting a flag in the section access table for users to determine whether they should see the real data or a masked version of the sensitive fields. In the example below, the code is restricting some fields for users at the individual school level but allowing schools to compare their results to the rest of the schools in the data set.

Please refer to the attached QVF and remember that Section Access does not function in Qlik Sense Desktop and must be deployed to a Qlik Sense Server environment. I've also attached the QVW for the QlikView solution.

Notes

Uncomment the commented section of the code
Change userA, userB and adminUser to users in your environment
The solution works for both QlikView and Qlik Sense.
Consider aggregating the de-identified facts to reduce the number of records in the app.

userA from SchoolA will see just Teacher and Student for School A records ONLY. All other schools will have the words De-identified in the Teacher and Student columns:

Credit to my colleague Yaniv Feldman yfe‌ for this solution.

Matt Nunn

Qlik Consulting

Re: Mask or de-identify data for certain users using Section Access

Anonymous — Mon, 20 Mar 2017 08:32:18 GMT

Hi Matt,

is it possible to get the result as qvw as well?

Regards, Chris

Re: Mask or de-identify data for certain users using Section Access

mnu — Mon, 20 Mar 2017 09:31:32 GMT

No problem Chris - I've attached the sample code in a qvw.

Re: Mask or de-identify data for certain users using Section Access

nkaruwon — Tue, 26 Sep 2017 22:26:24 GMT

I have followed instructions on the document above. I am trying to have all the other non admin users see only their records with the rest of the records marked as "De-Identify" . When I pull the information on my visualisation as the said users, I correctly see the user record and only one other De-Identified record. I am expecting more records to be presented in this manner but I only see 1 record. Where could I have gone wrong? Anyone please assist.

Re: Mask or de-identify data for certain users using Section Access

rwunderlich — Sun, 03 Jun 2018 14:57:52 GMT

Nice work!

Re: Mask or de-identify data for certain users using Section Access

richard24best — Wed, 04 Nov 2020 13:16:46 GMT

Hi Matt,

Is it possible the attach the files again, as I don't see them anymore on this thread.

Appreciate your help.

Regards,

Richard

Re: Mask or de-identify data for certain users using Section Access

richard24best — Wed, 04 Nov 2020 13:21:02 GMT

Please ignore, I can see them now.

Thanks.

Richard

Re: Mask or de-identify data for certain users using Section Access

matrix123 — Fri, 27 Jan 2023 14:02:05 GMT

Hello,

Can anyone please post the script in a txt file , I am looking to get something similar.

Regards,

Matrix

Re: Mask or de-identify data for certain users using Section Access

richard24best — Mon, 30 Jan 2023 14:44:24 GMT

Hi Matrix,

I have replied on your message with the script

Re: Mask or de-identify data for certain users using Section Access

Nibswoo81 — Wed, 20 Sep 2023 10:35:27 GMT

Hi all. Is there any way to implement masking without having to duplicate all the data?

Thanks.