topic Re: Section access :Access Denied in App Development

Section access :Access Denied

shwetagupta — Tue, 21 Jun 2016 11:30:21 GMT

Hi All,

I am working on Section Access in Qlik Sense for the first time but everytime I am getting Access is denied.

-Even admin is getting the same.

-App is published in Everyone stream.

I have uploaded excel sheets for both Section Access and Section Application , following is the code for the same.

SECTION ACCESS;

LOAD

Upper([ACCESS]) as ACCESS, // Took

Upper([USERID])as USERID,

Upper ([PASSWORD])as PASSWORD,

UPPER([CATEGORY]) as Sales.Category;

LOAD

[ACCESS],

"USERID",

"PASSWORD",

Re: Section access :Access Denied

oknotsen — Tue, 21 Jun 2016 11:46:18 GMT

Please note that Qlik Sense does NOT use the password column, so I suggest you remove that.

Without knowing the username of the person trying to login and the content of your Section Access.xlsx it is kinda hard to tell you why someone does not have access. My educated guess is "because the username is not in the section access table".

Re: Section access :Access Denied

Anonymous — Tue, 21 Jun 2016 14:42:06 GMT

Hi Shwetha,

As per the above comment password need not be used in the qlik sense section access;

and the thumb rule in qlik sense section access is to convert ACCESS, USERID, SALES CATEGORY into upper case before using it in the section access..

and terminate section access with key word SECTION APPLICATION..

I have a working section access logic which I have pasted below..

I have used QVD's you can remove that and load directly from the excel as I have done in the first step

tmp:
LOAD
    "ACCESS",
    upper(opd) as USERID,
    UPPER("Cost Centre") AS [COST CENTRE]
FROM [lib://QS_Cost_Center (opd_f29121)/Copy of Cost Centre Manager list_Test.xlsx]
(ooxml, embedded labels, table is Sheet1);

STORE tmp into [lib://QS_Cost_Center_QVD (opd_f29121)/temp_test_300.qvd];

drop table tmp;

tmp_sec:
LOAD
    "ACCESS",
    "USERID",
    "COST CENTRE"
FROM [lib://QS_Cost_Center_QVD (opd_f29121)/temp_test_300.qvd]
(qvd);

Concatenate
LOAD * inline [
ACCESS, USERID,COST CENTRE
USER, OPD\F29121,*
];

star is *;
section access;
Load * Resident tmp_sec;

section Application;

drop table tmp_sec;

Re: Section access :Access Denied

shwetagupta — Tue, 21 Jun 2016 17:52:01 GMT

Hi Chandrashekhar,

I am new to Qlik Sense, followed the Qlikview examples to implement this.

I am having few doubts :

1. As you have mentioned "convert ACCESS, USERID, SALES CATEGORY into upper case before using it in the section access". Did you mean by the column headers or the content. As per my understanding it should be content of the corresponding field.

- and 'ÚPPER' works in capitalising content under the fields (Correct ??) Which I have already done

-but my field name all through the app is Sale.Category so please suggest should I make it in 'uppercase' everywhere

2. Can you please elaborate how to terminate section access with key word SECTION APPLICATION

So If I ll go by my code following changes will help me to get rid off from the error

SECTION ACCESS;

LOAD

Upper([ACCESS]) as ACCESS,

Upper([USERID])as USERID,

Upper ([PASSWORD])as PASSWORD, // Change 1. Remove Password

UPPER([CATEGORY]) as Sales.Category; // Change 2: SALES.CATEGORY UPPERCASE

LOAD

[ACCESS],

"USERID",

"PASSWORD",

Re: Section access :Access Denied

Anonymous — Wed, 22 Jun 2016 08:56:59 GMT

ok I will clear your doubts...

1. Convert the content and the headings used in the section access to upper case. Since you are loading the section application with sales category this will connect to your factual data so the other table which has the sales category also need to be in upper case.

2. once the section application statement is encountered the section access logic gets completed... whatever you are loading below section application is just like any other table load.

if you can provide sample data I will write the logic and test in a sample app and send it across... also please be sure of how you are populating the USERID .. mine is OPD\F29121 OPD is the domain name...

Thanks

Re: Section access :Access Denied

sujith1011 — Wed, 22 Jun 2016 16:28:56 GMT

Make sure your userid is prefixed with userdirectory as well, this should be in your section access spreadsheet

so userid value should be like "SALES\USER001"

Also make sure you have admin user in the spreadsheet

values will be as below ,

ACCESS = ADMIN

USERID = SALES\ADMINUSER

CATEGORY=*

SECTION ACCESS;

LOAD

Upper([ACCESS]) as ACCESS, // Took

Upper([USERID])as USERID,

UPPER([CATEGORY]) as CATEGORY;

LOAD

[ACCESS],

"USERID",

"PASSWORD",

Re: Section access :Access Denied

shwetagupta — Fri, 24 Jun 2016 10:13:18 GMT

Hi Chandrashekhar,

I am now out of Access is denied problem. Thanks for suggestions.

Now I am having a new problem in the same case mentioned above :

Whenever I am applying section access every user is getting reduced data but corresponding to all three mentioned category.

If I am not wrong with the logic , whatever I will add to the category my data will get reduced corresponding to CAT1, CAT2, CAT3 for USER1, USER2 and USER 3 respectively.

i.e USER 2 and USER3 will not be able to see CAT1. (Right ?) but this is not happening, Following is my new code and the excel sheet format I am using.

now my new script looks like this :

SECTION ACCESS;

LOAD

ACCESS,

NTNAME,

UPPER([Category]) as [SALE.CATEGORY];

LOAD

ACCESS,

NTNAME,

Category

FROM [lib://Haldirams (uic_shwetag)/Section Access.xlsx]

(ooxml, embedded labels, table is Section_Access);

Section Application;

LOAD

Upper(Category) as [SALE.CATEGORY]

FROM [lib://Haldirams (uic_shwetag)/haldiram K R ENT - ZRP.xlsx]

(ooxml, embedded labels, table is Sale);

and my excel sheet for section access is this :

ACCESS

NTNAME

Re: Section access :Access Denied

Anonymous — Fri, 24 Jun 2016 10:24:16 GMT

Shwetha..try changing Category in your excel to [SALE.CATEGORY] and change wherever you are using that field.

and try the logic... or you can send me over your sample qvf and sample excel I will write test and give you the code

Thanks

Re: Section access :Access Denied

shwetagupta — Fri, 24 Jun 2016 10:37:48 GMT

Chandrasheker,

I am renaming this Upper(Category) as [SALE.CATEGORY] in my code already(as mentioned above), wont it solve the purpose.

I dont think there is any need to make change in EXCEL

secondly I have already changed the fields wherever I was using Sales.Category earlier.

Sorry but due to some limitations I am unable to share qvf.

Thanks

Re: Section access :Access Denied

sujith1011 — Fri, 24 Jun 2016 13:36:30 GMT

ADMIN DOMAIN\ADMINISTRATOR,

Don't put "*" for Category put Space

Re: Section access :Access Denied

shwetagupta — Mon, 27 Jun 2016 05:10:16 GMT

Its not working. If I am putting space, it is giving me all the category corresponding to all the user.

Problems for me are :

1. Administrator and all users can also see only those three category which are used for section access.

2. User which are allocated to particular Category can also see all the three category instead of their allocated Category corresponding to Section Access.

Thanks!!

Re: Section access :Access Denied

sujith1011 — Mon, 27 Jun 2016 18:45:27 GMT

Shweta,

Please provide some sample data from both , section_access spreadsheet as well as the data used for section_application

thanks!!

Re: Section access :Access Denied

shwetagupta — Thu, 30 Jun 2016 05:49:20 GMT

hi,

Please confirm one thing, If I ll name the user with domain then do I need to link it with My Active directory or will it read/recognize user through domain.

When I was exploring what mistake I am making while working then I got to know my username are not working well though reduction field is working fine on data.

What I am unable to do is to restrict the user.

Thanks in Advance

Re: Section access :Access Denied

sujith1011 — Thu, 30 Jun 2016 16:18:11 GMT

I have placed sample screenshot of users, so data in spreadsheet should be like below

ACCESS, USERID, CATEGORY

USER, MASTER\PERFORMANCE4 ,CATEGORY1

USER, MASTER\PERFORMANCE43, CATEGORY2

ADMIN, MASTER\ADMINUSER1, *

ADMIN, MASTER\ADMINUSER2\

Admin user "ADMINUSER1" will only be able to see CATEGORY1 or CATEGORY2

whereas "ADMINUSER2" should be able to see all DATA