topic Re: The Qliksense App Restriction is not working in Management & Governance

The Qliksense App Restriction is not working

spalla — Mon, 24 Apr 2023 13:53:34 GMT

Hello,

The Qliksense App Restriction is not working though .Here are the steps followed as instructed.

1.Creates a Custom Property

2.Disabled the default Stream rule

3.Assigned the custom property to App and Users

4.Added the security rule to stream.

Re: The Qliksense App Restriction is not working

rubenmarin — Mon, 24 Apr 2023 14:17:55 GMT

Hi, it will be good if you add the security rule used to check that it's correct, and use the preview option to check the permissions granted. You can also check in the audit sections that there is no other rule giving the permission.

Re: The Qliksense App Restriction is not working

spalla — Mon, 24 Apr 2023 15:48:10 GMT

did not find anything granting access. Any help is appreciated please.

Re: The Qliksense App Restriction is not working

rubenmarin — Tue, 25 Apr 2023 06:21:23 GMT

Hi, if there is access, something must be granting that access. Double check the audit section to check the rules granting the access.

And add screenshots, and the security rule. This works, so something must be wrong in the configuration applied.

Re: The Qliksense App Restriction is not working

spalla — Tue, 25 Apr 2023 14:06:15 GMT

Hi,Please see the the attached document with all the steps and result.

Re: The Qliksense App Restriction is not working

rubenmarin — Tue, 25 Apr 2023 14:14:03 GMT

Hi, the second step grants access to the user, as the user has the LOS value in @AppAccess.

The 3rd step can't revoke the permission granted in step 2, in any rule gives permission, the user has the permission.

Re: The Qliksense App Restriction is not working

spalla — Tue, 25 Apr 2023 14:19:39 GMT

so third step should be removed?but how do I restrict other users access to this app which is been granted to @LOS users.

Re: The Qliksense App Restriction is not working

spalla — Tue, 25 Apr 2023 14:20:06 GMT

Is it possible for a zoom call?

Re: The Qliksense App Restriction is not working

Chip_Matejowsky — Tue, 25 Apr 2023 14:24:21 GMT

@spalla,

The Qlik Community forums isn't the avenue to request meetings with Qlik Support. For assistance with Security Rule creation, you should contact your Qlik account manager to schedule an engagement with Qlik Professional Services.

Best Regards

Re: The Qliksense App Restriction is not working

spalla — Tue, 25 Apr 2023 14:26:28 GMT

My Apologies,got it

Re: The Qliksense App Restriction is not working

rubenmarin — Tue, 25 Apr 2023 14:36:09 GMT

If users without LOS has access to the app it must be because there are other rules giving the access, like the "Stream" rule.

You can do a copy of this rule and disable the original, and edit the copy of the rule so it doesn't give access to the condition of step 3.

Re: The Qliksense App Restriction is not working

spalla — Tue, 25 Apr 2023 14:41:09 GMT

I already disabled The Stream default rule ,the issue is the user with @LOS is seeing all the apps not just the one app which is supposed to be seen.

Re: The Qliksense App Restriction is not working

rubenmarin — Tue, 25 Apr 2023 14:56:25 GMT

Because the user also belong to CORP userdirectory, so the step 3 is giving the user access to all resources except the one with that id, there might be an additional condition on step 3 to prevent to give permissions to users with @LOS

Re: The Qliksense App Restriction is not working

spalla — Tue, 25 Apr 2023 16:04:19 GMT

The negation of second rule is not working either.Like !=LOS and !=resource id

Re: The Qliksense App Restriction is not working

rubenmarin — Wed, 26 Apr 2023 06:07:11 GMT

Check the audit section to see wich rules are giving access: https://help.qlik.com/en-US/sense-admin/February2023/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdminister/QSEoW/Administer_QSEoW/Managing_QSEoW/audit-access-control.htm