<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Section Access for Domain only in App Development</title>
    <link>https://community.qlik.com/t5/App-Development/Section-Access-for-Domain-only/m-p/1791664#M61922</link>
    <description>&lt;P&gt;Hi everybody,&lt;/P&gt;&lt;P&gt;we are currently working on a QS App with Section Access, to which we are connecting via a virtual proxy using a JWT Token. In this VP, we set the group property of the user to one JWT field, which is not the field holding the user domain, since we already have Section Access in another app that we need to connect to with the same VP using this specific field.&lt;/P&gt;&lt;P&gt;In this first app, we now want to apply Section Access based on the user domain. Is there any way to achieve something like this? In my first experiments, it looks like the wildcard * for the userid only works in total, i.e. you have the following options:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;Table:
LOAD * Inline [
A, B
0, 1
1, 2
];

SECTION Access;
Load * INLINE [
    ACCESS,USERID,GROUP, A
    USER,MYDOMAIN\USER1,*,1
];

// Using Group
// Load * INLINE [
//     ACCESS,USERID,GROUP, A
//     USER,*,GROUP_BELONGING_TO_MYDOMAIN, 1
// ];
Section Application;&lt;/LI-CODE&gt;&lt;P&gt;However, I would like to write something of the form&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;SECTION Access;
Load * INLINE [
    ACCESS,USERID,GROUP, A
    USER,MYDOMAIN\*,*,1
];

SECTION Application;&lt;/LI-CODE&gt;&lt;P&gt;because (as mentioned above), I don't have the domain information in the user group. Is there any way to achieve this without enumerating all possible users with their domain (which is a bit nasty as we don't know all users beforehand, since they connect externally using the JWT token) or using a second virtual proxy that maps the domain to group?&lt;/P&gt;&lt;P&gt;Thanks in advance&lt;/P&gt;&lt;P&gt;Florian&lt;/P&gt;</description>
    <pubDate>Sat, 16 Nov 2024 17:23:25 GMT</pubDate>
    <dc:creator>FlorianSchneider</dc:creator>
    <dc:date>2024-11-16T17:23:25Z</dc:date>
    <item>
      <title>Section Access for Domain only</title>
      <link>https://community.qlik.com/t5/App-Development/Section-Access-for-Domain-only/m-p/1791664#M61922</link>
      <description>&lt;P&gt;Hi everybody,&lt;/P&gt;&lt;P&gt;we are currently working on a QS App with Section Access, to which we are connecting via a virtual proxy using a JWT Token. In this VP, we set the group property of the user to one JWT field, which is not the field holding the user domain, since we already have Section Access in another app that we need to connect to with the same VP using this specific field.&lt;/P&gt;&lt;P&gt;In this first app, we now want to apply Section Access based on the user domain. Is there any way to achieve something like this? In my first experiments, it looks like the wildcard * for the userid only works in total, i.e. you have the following options:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;Table:
LOAD * Inline [
A, B
0, 1
1, 2
];

SECTION Access;
Load * INLINE [
    ACCESS,USERID,GROUP, A
    USER,MYDOMAIN\USER1,*,1
];

// Using Group
// Load * INLINE [
//     ACCESS,USERID,GROUP, A
//     USER,*,GROUP_BELONGING_TO_MYDOMAIN, 1
// ];
Section Application;&lt;/LI-CODE&gt;&lt;P&gt;However, I would like to write something of the form&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;SECTION Access;
Load * INLINE [
    ACCESS,USERID,GROUP, A
    USER,MYDOMAIN\*,*,1
];

SECTION Application;&lt;/LI-CODE&gt;&lt;P&gt;because (as mentioned above), I don't have the domain information in the user group. Is there any way to achieve this without enumerating all possible users with their domain (which is a bit nasty as we don't know all users beforehand, since they connect externally using the JWT token) or using a second virtual proxy that maps the domain to group?&lt;/P&gt;&lt;P&gt;Thanks in advance&lt;/P&gt;&lt;P&gt;Florian&lt;/P&gt;</description>
      <pubDate>Sat, 16 Nov 2024 17:23:25 GMT</pubDate>
      <guid>https://community.qlik.com/t5/App-Development/Section-Access-for-Domain-only/m-p/1791664#M61922</guid>
      <dc:creator>FlorianSchneider</dc:creator>
      <dc:date>2024-11-16T17:23:25Z</dc:date>
    </item>
  </channel>
</rss>

