topic Re: user level restriction using section access in Management & Governance

user level restriction using section access

Shriram_Sridhar — Wed, 29 Jan 2025 17:03:10 GMT

Hi All,
I was trying to implement section access to restrict what level of data a user can see. Let's take a scenario, I want to restrict user view based on country and region.

User	Country	Region
A	India	All
B	USA	Texas
C	Canada	All
D	All	All

Section Access;
security:

Load * Inline [
ACCESS,USERID, COUNTRY, REGION
USER,DOMAIN\A,INDIA,ALL
USER,DOMAIN\B,USA,TEXAS
USER,DOMAIN\C,CANADA,ALL
USER,DOMAIN\D,ALL,ALL
];

When I implement the above section access, all users see only USA and Texas. The issue occurs only when I add Region in section access. Your help is much needed.

Re: user level restriction using section access

rubenmarin — Wed, 07 Jul 2021 13:02:03 GMT

Hi, * could be used to give acess to all values in a field, but only to values loaded in the section access itself. https://help.qlik.com/en-US/sense/February2021/Subsystems/Hub/Content/Sense_Hub/Scripting/Security/manage-security-with-section-access.htm

To give access to all values of the field you can first load all values and then you can use *.

ie:

AccessData: LOAD 'USER' as ACCESS, 'DOMAIN\ADMIN' as USER // or a dummy user that don't really exists autogenerate 1; Join (AccessData) LOAd Distinct COUNTRY, REGION FROM/resident [WhereValuesAreStored]; concatenate (AccessData) Load * Inline [ ACCESS,USERID, COUNTRY, REGION USER,DOMAIN\A,INDIA,* USER,DOMAIN\B,USA,TEXAS USER,DOMAIN\C,CANADA,* USER,DOMAIN\D,*,* ];

Re: user level restriction using section access

Shriram_Sridhar — Wed, 07 Jul 2021 14:06:09 GMT

Thanks a lot!!! It worked for me 🙂