Security Rule Example: "Sharing of Bookmarks"

Andre_Sostizzo — Thu, 13 May 2021 19:11:19 GMT

In this scenario, the administrator wants to grant access an ability for users to see other user's bookmarks.

Environment:

Resolution:

Note: Debugging and writing custom security rules cannot be carried out by Qlik Support directly. No Support or maintenance is implied or provided. Further customization is expected to be necessary and it is the responsibility of the end administrator to test and implement an appropriate rule for their specific use case. The example provided below is provided as is, and we suggest joining our Qlik Community for access to more best practices and solutions. For direct implementation advice, our Consulting Service and Pre-Sales are available to assist.

Name_BookmarkSharing
Description: This rule will allow a limit amount of sharing of bookmarks
Filters:App*
Actions: Read

-- Every bookmark on an app which they have read access; very permissive use case
Conditions: ((user.name="Eric Hanson") and (resource.objectType="bookmark"))
-- Every bookmark which has been created by a named user; allows developer / admin control over whose bookmarks are shared for a more locked down experience
Conditions: ((user.name="Eric Hanson") and (resource.objectType="bookmark" and resource.owner.userId="ltu"))
-- Every bookmark which has been created on a named app
Conditions: ((user.name="Eric Hanson") and (resource.objectType="bookmark" and resource.app.name="Travel Expense Management"))
-- Every bookmark which has a specified string in it; use case allowing users to name their bookmarks with a string to flag them as shareable.
Conditions: ((user.name="Eric Hanson") and (resource.objectType="bookmark" and resource.name like "*Blah*"))

In these examples, we am hard coding a user name as the user selection criterion but you should be able to further customize that to say user.group, user.directory, etc.

The other consideration is that bookmarks in Sense apply to a specific sheet.

This means that the user will need to have permission on the underlying sheet which the selections are applied to. There’s not going to be a programmatic way that will grant users read access to the sheet based on their read access on a bookmark. So one would want to be careful with a broad ungoverned / untrained security rule for sharing bookmarks.

article Security Rule Example: "Sharing of Bookmarks" in Official Support Articles

Security Rule Example: "Sharing of Bookmarks"

Environment:

Resolution:

Related Content: