topic Re: Section Access only working for users with RootAdmin privileges - QS in Management & Governance

Section Access only working for users with RootAdmin privileges - QS

gcharlesworth — Wed, 01 Aug 2018 17:44:56 GMT

Hi all -

Looking for some quick insight on a small issue I'm having. While testing a basic Section Access script for an application with a small sample of internal users, I noticed that users without RootAdmin roles (given in the QMC) were denied from the application even though they were hard-coded into the Section Access script.

I verified my hypothesis by adding three fellow developers to the Section Access script (all with RootAdmin privileges) and three normal end-users from the business. The former three were able to pass and the data reduced correctly, while the latter three were denied access. I then gave a RootAdmin role to one business user and re-tested; he was able to pass and the data reduced accordingly.

Any ideas on what's going on here?

Re: Section Access only working for users with RootAdmin privileges - QS

PabloTrevisan — Wed, 01 Aug 2018 18:19:41 GMT

Hi Gary, in cases with Data Reduction use this format....

Could you show me your script ?

EXAMPLE:

Section Access;

LOAD * inline [

ACCESS, USERID, REDUCTION

ADMIN, DOMAIN\USER1, USER1

ADMIN, DOMAIN\USER2, USER2

USER, DOMAIN\USER3, USER3

USER, INTERNAL\SA_SCHEDULER,,,*

];

Section Application;

Star is *;

TAB:

Load * InLine [

REDUCTION, CONTRY

USER1, *

USER2, *

USER3, USA

SVC_SENSE, *

];

Re: Section Access only working for users with RootAdmin privileges - QS

gcharlesworth — Wed, 01 Aug 2018 19:06:41 GMT

Pablo -

Here is my sample generator for SA qvd within my Qlikmart, and the SA implemented in the application:

Re: Section Access only working for users with RootAdmin privileges - QS

PabloTrevisan — Wed, 01 Aug 2018 19:34:22 GMT

Gary,

Adequate your script based on my example that will work correctly, detail: you will use the '*' in the Section Application, see my example above.

Section Access;
LOAD * inline [
ACCESS, USERID, REDUCTION
ADMIN, TXT\GARY, GARY
ADMIN, TXT\MARIE, MARIE
USER, TXT\JOHN, JOHN
USER, INTERNAL\SA_SCHEDULER,,,*
];
Section Application;
Star is *;
TAB:
Load * InLine [
REDUCTION, SOLD
GARY, *
MARIE, 12546
JOHN, 123456
SVC_SENSE, *
];

Note that SOLD it's a FIELD from your data model.

Re: Section Access only working for users with RootAdmin privileges - QS

1994 — Wed, 29 May 2024 12:02:09 GMT

AUTHORIZARTION:

LOAD

'USER' AS ACCESS,

UPPER(USER_DOMAIN)&'\'&UPPER(USER_CODE) AS "USERID",

// Upper([ACCESS]) as ACCESS,

USER_COMP_CODE ,

USER_CAT_CODE ,

SCHEMA AS ENTITY

FROM [lib://Retail /ACCESSDATA1.qvd]

(qvd)WHERE USER_MODULE='Sales' ;

LOAD * INLINE

[

ACCESS,USERID,USER_COMP_CODE,USER_CAT_CODE,ENTITY

'ADMIN','INTERNAL\SA_SCHEDULER','ALL','ALL','ALL'

'CONTENTADMIN','FFC\ANKITA.THT',ALL,'ALL','ALL'

'ADMIN','FFC\AKASH.M','ALL','ALL','ALL'

'USER','FFC\XYZ

.ABC','001','ALL','ALL'

];

SECTION ACCESS;

LOAD

Upper(trim("ACCESS")) as ACCESS,

Upper(trim("USERID")) as USERID,

IF(UPPER(TRIM([USER_COMP_CODE]))= 'ALL','*', TEXT([USER_COMP_CODE])) AS [COMPANY ID],

// IF(UPPER(TRIM([USER_DIVN_CODE]))= 'ALL','*', TEXT([USER_DIVN_CODE])) AS [DIVISION ID],

IF(UPPER(TRIM([USER_CAT_CODE]))= 'ALL','*', TEXT([USER_CAT_CODE])) AS [ITEM CATEGORY],

IF(UPPER(TRIM([ENTITY]))= 'ALL','*', TEXT([ENTITY])) AS [ENTITY]

RESIDENT AUTHORIZARTION;

SECTION APPLICATION;

DROP TABLE AUTHORIZARTION; sectional access working for only admin and content admin not for users

Re: Section Access only working for users with RootAdmin privileges - QS

1994 — Sun, 09 Jun 2024 14:43:47 GMT

AUTHORIZARTION:

LOAD

'ADMIN' AS "ACCESS",

UPPER(USER_DOMAIN)&'\'&UPPER(USER_CODE) AS "USERID",

// LOGIN_USER_CODE,

USER_CODE,

USER_COMP_CODE,

USER_CAT_CODE,

USER_MODULE,

SCHEMA AS ENTITY

FROM [lib://Retail QVD (qlik-bi_qsadmin)/ErpsysretQVD/Master\ACCESSDATA1.qvd]

(qvd);

LOAD * INLINE

[

ACCESS,LOGIN_USER_CODE,COMP_CODE,CAT_CODE,ENTITY

'ADMIN','INTERNAL\SA_SCHEDULER','ALL','ALL','ALL

'USER','FFC\ANKITA

','ALL','ALL','ALL'

];

SECTION ACCESS;

LOAD

"ACCESS",

USERID,

IF(UPPER(TRIM([USER_COMP_CODE]))= 'ALL','*', TEXT([USER_COMP_CODE])) AS [COMPANY ID],

IF(UPPER(TRIM([USER_CAT_CODE]))= 'ALL','*', TEXT([USER_CAT_CODE])) AS [ITEM CATEGORY],

IF(UPPER(TRIM([ENTITY]))= 'ALL','*', TEXT([ENTITY])) AS [ENTITY]

RESIDENT AUTHORIZARTION;

SECTION APPLICATION; THIS SECTION SCCESS NOT WORKING FOR USER ACCESS DENIED FOR ANKITA USER