topic Re: Security rules to enable user-initiated reload? in Management & Governance

Security rules to enable user-initiated reload?

Oleg_Troyansky — Tue, 07 Jun 2016 11:57:13 GMT

Hi everybody,

It's my turn to ask a question. I need to enable the user to reload his Sense App from the UI, while the App is published to a stream. I installed an extension from the Branch web site, and it works just fine when the app is not published, however once it's published I'm getting an error message "Access is denied".

Could someone explain to me in detail what security rule(s) need to get created in order to enable that? Should I enable Apps, Reload Tasks, Objects, etc...

thanks in advance,

Oleg Troyansky

Re: Security rules to enable user-initiated reload?

Anonymous — Tue, 07 Jun 2016 13:37:47 GMT

Hi Oleg,

I am sure you might have imported your extension to the QMC extensions under Manage resources..

Once you import it should appear on the list and you select it and edit it and you see the below window with user access and you will have to give access

and next create a security rule as below screen shot:

save everything and use the extension in your app and republish to any stream you want and ask the users to whom you have given access to check..

Thanks

Re: Security rules to enable user-initiated reload?

Oleg_Troyansky — Tue, 07 Jun 2016 14:25:35 GMT

Hi Chandrasheker,

thank you so much for your quick response. I tried the suggested, but the problem wasn't solved.

I think the issue is not to enable the extension for a user (all extensions are enabled for all users by default), but rather enabling the published App to be reloaded by the user - and for that, I can't find the correct security rule.

If you could possibly try the following extension:

Qlik Branch

and make it work for a published App, it would help me a great deal!

thanks in advance!

Oleg Troyansky

Re: Security rules to enable user-initiated reload?

Tue, 21 Mar 2017 20:19:23 GMT

Oleg,

I have nothing to contribute, but I hope someone has a simple answer for this need. I too am working through the same scenario with the same extension. Unfortunately, I have very limited rights to my client's server, so I'm unable to test a solution.

The default security rule on our server only allows app owners to reload their own apps.

It would be great if someone could help us with creating a security rule that overrides the default rule and would allow a user to reload any app in a given stream.

Thanks for the original post! I'll follow and update you if I find a solution.

Thanks,

Ben

Re: Security rules to enable user-initiated reload?

Anonymous — Wed, 14 Jun 2017 22:28:59 GMT

Anyone find the answer to this? I'm running into the same problem.

Want to have a user with limited access (can not create new apps, can not edit an app), but I want them to be able to push the RELOAD button in the app from an extension and reload it dynamically.

I can't find the correct combination of security rules to make it work. Just keep getting Access is Denied...

Re: Security rules to enable user-initiated reload?

lucienorrin — Wed, 28 Jun 2017 19:56:01 GMT

I'm in the same boat as Jonathan.

It works great for admins but I can't seem to get it working for users.

Re: Security rules to enable user-initiated reload?

marcos — Tue, 18 Jul 2017 12:47:17 GMT

I was testing the new version of ReloadButton extension too, and it works fine when i used it with the user who was the current owner of the APP, but failed using another user.

I could solve it by making a little change in Security Rule proposed:

Resource filter:

App_*,App.Object_*

Conditions

(((resource.resourcetype="App" and resource.stream.name="Everyone") or (resource.resourcetype="App.Object" and resource.app.stream.name="Everyone" and resource.objectType = "app_appscript")))

Context

Both in hub and QMC

Actions

Read,Update

See the text remarks at Resource filter, Conditions and Actions.

Re: Security rules to enable user-initiated reload?

chrislemm — Thu, 31 Aug 2017 09:39:47 GMT

Hello,

I know the post is older than a year. I had the same issue today. I solved it with giving the user special access to every data-connection used in the apps script:

Also you need to add a specific resource rule in the stream:

Tell me if you could solve this problem using my hints.

Best regards

Re: Security rules to enable user-initiated reload?

hartmoli — Tue, 09 Oct 2018 06:42:18 GMT

I figured out a similiar solution, but unfortunately there is the impact after reloading the app, the user has access to the load script, data model and so on.

Same behaviour for the app owner also.

Re: Security rules to enable user-initiated reload?

dafnis14 — Wed, 17 Oct 2018 14:46:02 GMT

Hi Oliver,

Does the solution you figured work in Sense September 2018 version?

Re: Security rules to enable user-initiated reload?

hartmoli — Fri, 19 Oct 2018 05:54:59 GMT

Hi Dafnis

Didn't tested it on September 2018, only on June 2018. But I guess it will also work on the september Release. Its actually the same solution as from christopher

Re: Security rules to enable user-initiated reload?

sasikumar — Wed, 10 Jul 2019 06:00:10 GMT

hi,

have u found any solution for reload button..?

Re: Security rules to enable user-initiated reload?

philipp_ebner — Thu, 22 Aug 2019 12:12:15 GMT

Hi Sasikumar,

Try this:

Create a Custom Property according to my example:
Name: AllowRessources
Ressource Types: Apps, Data Connections, Users
Values: EditPublishedApp.

5 .Create a Security Rule which relies on that Custom Property:
Ressource Filter: App_*,App.Object_*
Advanced: ((user.@AllowResources="EditPublishedApp"))

6. Assign that Custom Property to the Users which should be allowed to execute the Reload:

Did that help you?

Cheers Philipp

Re: Security rules to enable user-initiated reload?

bogdanchiriac — Mon, 26 Aug 2019 13:44:33 GMT

Hi @philipp_ebner , I have tried the solution you presented, it does not work for my case.

When a user tries to reload the published app, he gets the following message:

User Error

Re: Security rules to enable user-initiated reload?

philipp_ebner — Mon, 26 Aug 2019 14:11:19 GMT

Hi Bogdan,

try giving that specific User the "Root admin" Role, to check whether it has something to do with that.

Does this change the behaviour?

Re: Security rules to enable user-initiated reload?

bogdanchiriac — Mon, 26 Aug 2019 14:16:28 GMT

No, the user still receives the same error.

Re: Security rules to enable user-initiated reload?

philipp_ebner — Mon, 26 Aug 2019 15:16:05 GMT

Hi Bogdan,

please add the following (do not undo my previous instructions):

Add a new attribute "DataConnections" to the prior Custom Property:

New Security Rule:

Assign this Attribute additionally to the User :

Does it work?

Re: Security rules to enable user-initiated reload?

bogdanchiriac — Tue, 27 Aug 2019 10:20:34 GMT

It does not work, I still get the same error.

Re: Security rules to enable user-initiated reload?

sasikumar — Wed, 28 Aug 2019 07:13:31 GMT

hi @bogdanchiriac

Im suggesting you to create a new, separate thread for your issue and provide screen captures/logs which help illustrate your issue.

let me know if u create thread.

Thanks.

Re: Security rules to enable user-initiated reload?

philipp_ebner — Thu, 29 Aug 2019 08:34:59 GMT

Hi Bogdan, which Version of Qlik Sense do you currently use?

Try upgrading to the latest available!

Then try again.