topic Re: Forbid to write in Data Connection in Connectivity & Data Prep

Forbid to write in Data Connection

denisb — Tue, 28 Dec 2021 19:50:15 GMT

Hi,

I have created some Data Connections to folders with QVD files. I want, that the user can use the QVDs to make analyses (Self Service).

But I also want, that the user cannot do any "store" in this Data Connection. I am afraid that data will be overwritten.

Does anyone have any ideas?

Thanks

Re: Forbid to write in Data Connection

ArnadoSandoval — Thu, 18 Mar 2021 08:32:22 GMT

Hi @denisb

One option is using Active Directory in your Windows OS, using AD-Groups to grant read-only permissions to a particular group of users, obviously, the account creating the QVDs will have full access to all the objects in the folder.

Hope this helps,

Re: Forbid to write in Data Connection

denisb — Thu, 18 Mar 2021 11:33:33 GMT

Hi @ArnadoSandoval,

thanks for your reply.

We are using AD-Groups.

But: I created a security rule: The users can read the Data Connection. This ensures only, that the user can use this connection in script (he cannot change the Data Connection itself). When the user Reloads the script (including a "store" or not), Qlik Sense uses the access right from the QS-Service-Account for the folder. And the service account has full access to our folders.

Re: Forbid to write in Data Connection

ArnadoSandoval — Thu, 18 Mar 2021 23:12:36 GMT

Hi @denisb

I am talking about implementing folder level security on the Windows folder as shown below, it works for me. Unfortunately, I do not have access to a windows server to properly document the procedure step by step.

hth

Re: Forbid to write in Data Connection

denisb — Tue, 23 Mar 2021 08:09:15 GMT

Hi @ArnadoSandoval ,

this works for QlikView, but not for QlikSense.

In QlikSense, when a user reloads the script with any dataconnection, QlikSense will not use the users AD-Account to access the folder. QlikSense uses it's service account.

Re: Forbid to write in Data Connection

ArnadoSandoval — Tue, 23 Mar 2021 10:30:06 GMT

Hi @denisb

All depends on you configuration, and the security rules assignments, unfortunately I do not have access to a QS Server to illustrate the procedure.

Re: Forbid to write in Data Connection

denisb — Wed, 12 May 2021 11:26:21 GMT

So, I created a new user, which has only read access to my folder.

I use this user for my Data Connection:

But, my users can still do this:

When the Data Connection is using user "TestQSuser", this should not be possible.

It doesn´t matter what User and Password I type into "User ID" and "Password". It seems that Qlik Sense ignores that.

Re: Forbid to write in Data Connection

ArnadoSandoval — Sat, 15 May 2021 10:09:17 GMT

Hi @denisb

Unfortunately, I do not access to a Qlik Sense Enterprise server folders structure, so I can't test or direct you on how to do this, I will give a try on my local environment, which is a Windows 10 laptop, I am not optimistic that I could replicate the procedure, but I will give it a try.

hth