topic Re: Section Access restricting all user in App Development

Section Access restricting all user

Sebastian_Dec — Tue, 08 Aug 2023 09:22:19 GMT

Hi, can someone help me and explain where I am doing wrong?
When granting access, I restrict access to ALL users, not just qlik2.

Values of ELSERVICE is only 0 and 1

"*" should return all results, but if something is constrained then the second condition should be constraint.
I used these materials:

https://help.qlik.com/en-US/sense/May2023/Subsystems/Hub/Content/Sense_Hub/Scripting/Security/manage-security-with-section-access.htm

My code looks like this:

Section Access; Authorization: LOAD * INLINE [ ACCESS, USERID, CZYELSERVICE ADMIN, *, * USER, *, * USER, qlik2, 1 ];

Re: Section Access restricting all user

Or — Tue, 08 Aug 2023 10:19:15 GMT

In this scenario, the third line won't do anything. You've already given all authenticated users access to everything, which includes the user qlik2.

If you want to give specific permissions to some users, you'll have to remove the first two lines (and the second line is useless in itself, since you've already given everyone ADMIN access in the first line, so there's no need to also give them USER).

Re: Section Access restricting all user

Sebastian_Dec — Tue, 08 Aug 2023 10:34:41 GMT

Thank you very much for your help, I understand something 🙂

I changed the code to this, but user sdec doesn't have all the values:

Section Access; Authorization: LOAD * INLINE [ ACCESS, USERID, CZYELSERVICE, USER, DOMAIN\SDEC, * USER, DOMAIN\QLIK2, 1 ];

I had to change to this:

Section Access; Authorization: LOAD * INLINE [ ACCESS, USERID, CZYELSERVICE, USER, DOMAIN\SDEC, 0 USER, DOMAIN\SDEC, 1 USER, DOMAIN\QLIK2, 1 ];

Is there any way to get every CZYELSERVICE value for a user?

Do you just need to repeat users and values?

Re: Section Access restricting all user

Or — Tue, 08 Aug 2023 10:38:21 GMT

Using * should work (you may need to explicitly use Star is *; )

Re: Section Access restricting all user

Sebastian_Dec — Tue, 08 Aug 2023 10:59:57 GMT

Star * not working:

Section Access; Authorization: LOAD * INLINE [ ACCESS, USERID, CZYELSERVICE, USER, SCAWAR\SDEC, * USER, SCAWAR\SCAWARQLIK2, 1 ];

Apparently it doesn't work for the 0-1 range, but thank you for your help anyway.

Re: Section Access restricting all user

Anssi — Wed, 09 Aug 2023 08:08:02 GMT

Hi,

Star * consist values only listed in Section Access -table, so you have to list all CZYELSERVICE values which you want to include in *

Other way is to declare user SDEC access as ADMIN.

br,Anssi