Section Access question

alexis — Tue, 06 Nov 2018 09:08:37 GMT

Hi All

I'm trying to implement section access in Qlik Sense - last time I even looked at Section Access was some years ago.

I want to implement a mechanism where I can give certain users access to all the reduction values even those not listed in the section access - let me illustrate with an example..

SECTION ACCESS;

LOAD * Inline [

ACCESS, USERID, PRODUCT

ADMIN, ADMIN1, *

USER, MANAGER1, *

USER, USER1, A

USER, USER2, B

];

SECTION APPLICATION;

LOAD * Inline [

PRODUCT, Data

A,2

A,3

B,4

B,3

C,5

C,4

];

I am guessing here that both the ADMIN and the MANAGER1 will have access to PRODUCT values A and B but not C as this (the value C) is not used in any of the reduction statements for the rest of the users.

I saw somewhere online (but it was from 2014 and referred to QlikView) that simply adding a reduction value that is not a wildcard (i.e. *) and does not exist in the reduction field (PRODUCT in this case) has the effect that I want which is to give a user access to all values irrespective of whether they are used in the reduction definition or not.

Questions:

1) Would changing:

USER, MANAGER1, *

USER, MANAGER1, <ALL>

have the effect that I want for MANAGER1?

2) What happens to ADMIN after the above - will she/he also see everything as they too now will see the <ALL> reduction?

If the above is not going to work how have people implemented "Managerial" access to dynamic fields (used in reduction for non-managerial users) that have too many values to allow manual input of every combination that exists in the data?

Thanks in advance

Alexis

Re: Section Access question

vitaliichupryna — Tue, 06 Nov 2018 11:11:15 GMT

Hi Alexis,

1) If you just change * to <ALL> Manager will not be able to open the application.

2) Will not be able to see everything because it doesn't work for manager.

You should create authorization bridge, see attached example.

Thanks,

Vitalii

Re: Section Access question

alexis — Wed, 07 Nov 2018 02:37:20 GMT

Hi there Vitalii

Your approach works fine (I just added a DISTINCT statement in the LOAD statement for efficiency), so I will award the "Correct Answer" - I am still intrigued by the Qlik video from Qlik Support entitled Section Access Best Practises - see https://youtu.be/Cq4QzR9s7AA ) which seems to support my suggested approach - care to comment once you've seen it?

T‌hanks

Alexis

topic Re: Section Access question in App Development

Section Access question

Re: Section Access question

Re: Section Access question