topic Re: Restrict "Export Data" on some sheets via sheet name prefix = noexport_ in Management & Governance

Restrict "Export Data" on some sheets via sheet name prefix = noexport_

dobak — Thu, 30 Nov 2023 12:59:17 GMT

hi i tried to restrict export data on a sheet by modifying the default security rule ExportAppData this way:

resource.HasPrivilege("read") and !user.IsAnonymous() and !(resource.name like "noexport_*")

Created 2 sheets: this one you can export, noexport_sheet

But i am still able to right click on the sheet objects and export data on both of the sheets.

What adjustments of my security rule would you propose?

Re: Restrict "Export Data" on some sheets via sheet name prefix = noexport_

Or — Thu, 30 Nov 2023 13:17:18 GMT

I believe the "resource" here is the object, not the sheet? You don't export data from a sheet.

Re: Restrict "Export Data" on some sheets via sheet name prefix = noexport_

dobak — Thu, 30 Nov 2023 13:50:27 GMT

i tested it on a names KPI object and it also did not work. only when giving the application a "nonexport_" prefix it started to block exports. but for all sheets and objects inside.

i am refering to this article which i got from qlik support today as an answer on how to restrict export of data on parts of applications: https://community.qlik.com/t5/New-to-Qlik-Sense/How-to-restrict-export-option-in-sheet-level/td-p/1889346

i am not sure if that answer was right but it was marked as right...

Re: Restrict "Export Data" on some sheets via sheet name prefix = noexport_

Or — Thu, 30 Nov 2023 13:59:24 GMT

Looking at that thread, they ended up using an app-level rule, not a sheet level one.

This may not be up to date, but at least as of 2021, there was no option to use it based on a sheet (the link includes an explanation):

https://community.qlik.com/t5/Deployment-Management/Qlik-Sense-security-rule-for-Exporting-data/td-p/1773707

Re: Restrict "Export Data" on some sheets via sheet name prefix = noexport_

dobak — Thu, 30 Nov 2023 14:54:26 GMT

yes it seems like there is only a way to do this on the app level. i leave this one open for a few days lets see if there is someone who would oppose. thank you.