topic Re: allow anonymous users to export data in Management & Governance

allow anonymous users to export data

korsikov — Tue, 25 Aug 2015 12:23:56 GMT

Hi everyone.

I need to allow anonymous users to export data.

What I tried to do.

Created secure rules:

1. Anon can create temp content

2. Anon can do export

but i can't export data from application and see error message "access denied"

Re: allow anonymous users to export data

Alexander_Thor — Tue, 25 Aug 2015 13:29:16 GMT

Hey Alexander,

This is currently a limitation and considered a bug. The reason why you are seeing the access denied error is that we tag any files in /temp/ against a user and then match that against requesting user which does not work anonymous users.

There are currently no workarounds for it unless you authenticate your users.

That was the bad news, good news is that R&D is working on the bug and it has been assigned internally.
Which usually means that it makes the cut quality wise it will ship in the next release (not september)

Re: allow anonymous users to export data

korsikov — Tue, 29 Mar 2016 12:48:31 GMT

today i'm user Qlik Sense 2.2.3 but steel can't export date with anonymous login. Addition for two security rules i'm allow full permision for folder ProgramData\Qlik\Sense\Repository\TempContent\ but nothing changed. And in FLY_Audit_Repository.txt not contain any record about this.

in Engine log FLY_Service_Engine.txt

2.2.3.0

20160329T162434.188+0300

ERROR

Fly

62104771-45b8-419d-842c-7a8ff8730af8

20160329T162434.188+0300

2.2.3.0

Command=GenericObject::ExportData;Result=403;ResultText=Error: Forbidden

5762ad4a-a17c-4d21-99f2-bea42e177f7a

f58ff87d-e148-4be0-8e94-85dfad6fc49b

145

NONE

anonymous2506bb8b-35bb-48e3-b9b3-ff5fcb528da5

Not available

Engine

GenericObject::ExportData

403

REST HTTP error

62104771-45b8-419d-842c-7a8ff8730af8

Fly_system_engine

212

20160329T162434.188+0300

INFO

Fly

System.Engine.Engine

140

8c5e0380-884c-42c4-b083-afcea4b3c94b

NT AUTHORITY\SYSTEM

REST: QRS response code 403 for path /qrs/tempcontent/create?filename=9a542308-0de5-44b0-a89d-a9b11b250793.xlsx&expires=600&serveonce=false

5762ad4a-a17c-4d21-99f2-bea42e177f7a

NONE

anonymous2506bb8b-35bb-48e3-b9b3-ff5fcb528da5

20160329T162434.188+0300

4104

3940

20160329T113130.000+0300

8c5e0380-884c-42c4-b083-afcea4b3c94b

I think that this is a problem in the QRS.

Re: allow anonymous users to export data

korsikov — Tue, 29 Mar 2016 13:35:04 GMT

addition found answer Qlik Support team on my request

" Exporting of data or apps is currently not supported in QlikSense. No current plan to make this available has been announced."

Re: allow anonymous users to export data

andydietler — Tue, 20 Sep 2016 18:04:43 GMT

Any idea if this was ever fixed? Running in to the same issue.

Re: allow anonymous users to export data

korsikov — Wed, 21 Sep 2016 05:45:58 GMT

i think it's not will fixed. So it was, is and will be

Re: allow anonymous users to export data

andydietler — Wed, 21 Sep 2016 15:59:15 GMT

Sorry, I don't understand what you mean? It isn't a bug or it is and was fixed in a previous release?

Re: allow anonymous users to export data

korsikov — Thu, 22 Sep 2016 07:00:52 GMT

this is an untranslatable play on words, "Так было, есть и будет." In this case, this behavior is "working as a designed" and Qlik that did not plan to change anything in the future. Perhaps if you give a serious business justification for the fact that it can be solved.

Re: allow anonymous users to export data

Alexander_Thor — Thu, 22 Sep 2016 13:02:23 GMT

Probably a misunderstanding from our side also so let's see if can't clear a few things up. We don't consider it a "bug" as it is in fact working as intended.

When you export data we will tag the exported file with who initiated the export so only the user that actually requested the export is able to access the data. However, since you are anonymous we can't tag your user to the file since you don't have a user.

So even if we don't consider it a bug we do have what we call a "improvement item" on this exact scenario with a proposed implementation. Currently there is no target release for it but at least it's in the planning stage

Re: allow anonymous users to export data

andydietler — Thu, 22 Sep 2016 14:56:23 GMT

Thank you both Alexanders.

My customer is using QAP to host embedded charts on a public facing websites. We are using this extension (Qlik Branch) to allow users to make selections in the chart and then export data based on those selections. It works wonderfully with our logged in development accounts, but when we switch to anonymous users on the website we get an error on export. We would love to be able to give the anonymous web users the same access to export the data to Excel.

Re: allow anonymous users to export data

Alexander_Thor — Thu, 22 Sep 2016 16:41:23 GMT

Well if you got a QAP license what I usually recommend is to just authenticate the users with a random user name.

Then exporting will work since now they technically are a user, even if that user is: randomusername198231039019230123