topic Re: Sense Section Access in App Development

Sense Section Access

Anonymous — Thu, 11 Jun 2015 19:39:06 GMT

I don’t understand how to solved this case in Sense 1.1 with Section Access.

The case is:
I have one user called USA and this user must only se data where COUNTRY_CODE is US.
Then I have a group of users called BI-ADMIN. Members of BI-ADMIN should not have any restrictions.
In my app, I have 10 unique values of COUNTRY_CODE.
USA is a user and BI-ADMIN is a Group in Active directory.

When I try the script below, members of BI-ADMIN can only see data where COUNTRY_CODE is US. So the script remove the nine other countries. That is not what I want.
Can anyone see why?

SECTION ACCESS;
LOAD * INLINE [
    ACCESS, NTNAME,   REDUCTION
    USER, DOMAIN\BI-ADMIN,
    USER, DOMAIN \USA, 1
];

SECTION APPLICATION;
LOAD * INLINE [
REDUCTION, COUNTRY_CODE
1 US
];

Re: Sense Section Access

Fri, 12 Jun 2015 17:09:52 GMT

Because your Section table don't have other Country entries. Did u enabled Strict Exclusion ?

Re: Sense Section Access

hic — Fri, 12 Jun 2015 17:20:23 GMT

In Qlik Sense, you cannot disable "Strict Exclusion". It is always on.

This means that you cannot use blank as notation for <ALL DATA>. Instead you must list it explicitly. For example, this way:

AllReductions:
Load
Concat(distinct Upper(Reduction), ',') as AllReductions
Resident TableWithReductions;
Let vAllReductions = Peek('AllReductions',-1, 'AllReductions');
Drop Table AllReductions;

Section Access;
Authorization:
load ACCESS, NTNAME, Subfield(REDUCTION,',') as REDUCTION Inline
[ACCESS, NTNAME, REDUCTION
USER, DOMAIN\BI-ADMIN, "$(vAllReductions)"
USER, DOMAIN\USA, 1 ];

HIC

Re: Sense Section Access

Anonymous — Mon, 15 Jun 2015 13:57:30 GMT

Thanks