topic Re: All users can see My Work in Management & Governance

All users can see My Work

covenant_bi — Thu, 01 Mar 2018 14:47:09 GMT

On our Qlik Sense server (Qlik Management Console 1.15.0) all users can see all unpublished apps in the Personal Work. I thought that users had their own space to create apps. Is there a setting that we missed on QMC setup?

Re: All users can see My Work

barry_stevens — Fri, 02 Mar 2018 01:40:05 GMT

With out knowing what security rules have been created or used very hard to know... have you modified any rules or created any?

You haven't made everyone contentadmin or rootadmin etc?

Re: All users can see My Work

Levi_Turner — Fri, 02 Mar 2018 01:44:14 GMT

At the outset, it is important to understand that the My Work section is purely an alias for "Unpublished apps which the user has read rights on". With that, there is a rule which is granting access. The easiest method to drill down to what rule is providing access is by using the Audit functionality in the QMC:

QMC > Audit
Target Resource: Apps
Select an app which the user is unexpectedly seeing
Select the user who is unexpectedly seeing the app
Environment: Only in Hub
Audit

From there you can inspect the rules which are providing access.

Relevant documentation: https://help.qlik.com/en-US/sense/November2017/Subsystems/ManagementConsole/Content/audit-overview.htm

It's going to be a custom rule which has a filter on App* or App_* but the audit functionality is the easiest way to drill down without needing a ton of reps in sight reading security rules.

Hope that helps.

Re: All users can see My Work

covenant_bi — Fri, 02 Mar 2018 13:30:32 GMT

Levi, thanks. It looks like our CreateApp rule also allowed for Read and Update. So everyone could see and update anyone else's app.

Re: All users can see My Work

covenant_bi — Fri, 02 Mar 2018 13:31:29 GMT

Barry, we have a vanilla installation. It was the CreateApp rule that had Read and Update attached to it. Things look in order now. Thanks

Re: All users can see My Work

Levi_Turner — Fri, 02 Mar 2018 16:49:03 GMT

Ahh, glad it was relatively straight-forward