topic Re: Data reduction: user sees other user's data in App Development

Data reduction: user sees other user's data

dafnis14 — Thu, 18 Oct 2018 14:09:21 GMT

Hi,

I have defined data reduction for 2 users.

The issue is that user ZZZZ doesn't see all the data, but sees the data of user YYYY as well.

Here is my script:

Star is *;

section access;

UserPerms:

LOAD * inline [

ACCESS,USERID,PRODUCTGROUPID

ADMIN, INTERNAL\SA_SCHEDULER,*

];

Concatenate (UserPerms)

LOAD

ACCESS,

USERID,

PRODUCTGROUPID

FROM $(vPathFinalData)UsersPermissions.qvd]

(qvd);

section application;

ItemGroup:

LOAD ItmsGrpCod,

ItemGroupName,

ItmsGrpCod as PRODUCTGROUPID

FROM

$(vPathFinalData)ItemGroup.qvd]

(qvd);

Why does it happen?

In a QlikView Desktop, it works as expected. Attached is a model and a users Excel table.

Thanks!

Message was edited by: Dafnis X Added the comparison to QlikView.

Re: Data reduction: user sees other user's data

wade12 — Thu, 18 Oct 2018 14:49:30 GMT

see this link (scroll down to dynamic data reduction section):

https://help.qlik.com/en-US/sense/June2018/Subsystems/Hub/Content/Scripting/Security/manage-security-with-section-access.htm

Re: Data reduction: user sees other user's data

dafnis14 — Thu, 18 Oct 2018 14:56:07 GMT

Hi Wade,

I looked there more then once... 🙂

Still can't figure out what I'm doing wrong....

Thanks!

Re: Data reduction: user sees other user's data

Lauri — Thu, 18 Oct 2018 17:16:37 GMT

Are you saying that ZZZZ can see all of YYYY's data? They both have access to ID 2249.

Re: Data reduction: user sees other user's data

dafnis14 — Fri, 19 Oct 2018 06:50:11 GMT

Hi Lauri,

Yes. That's exactly what i'm saying...

It's fine that both can see the ID 2249.

As I said, ZZZZ doesn't see all the data (hundreds of product group), but all the data defined in the table.

Thanks!

Re: Data reduction: user sees other user's data

Lauri — Fri, 19 Oct 2018 20:34:00 GMT

So the other hundreds of products groups belong to other users (not YYYY and ZZZZ), and ZZZZ can't see any of them?

It might be easier if you provide the data.

Re: Data reduction: user sees other user's data

dafnis14 — Sat, 20 Oct 2018 05:18:27 GMT

Hi Lauri,

I added the data to the original post. Please note that I've checked it in QlikView and it works as expected:

The database table has hundreds of product groups, but the users see only the product groups which are defined for them in the original Excel.

Thanks so much for your willing to help!

Re: Data reduction: user sees other user's data

dafnis14 — Wed, 24 Oct 2018 09:42:33 GMT

Hi,

The domain was missing from the permission file.

This caused users to see all the data.

The strange thing is why they were able still able to access the app.

Please note that if a domain is not included in the script:

LOAD * inline [

ACCESS, USERID, REDUCTION

USER, XXX,

];

access is denied!