article Qlik Sense: Script and files being removed when using ODAG & Dynamic views in Official Support Articles

Qlik Sense: Script and files being removed when using ODAG & Dynamic views

Patricia_Silva — Mon, 07 Aug 2023 10:51:42 GMT

In Qlik Cloud new apps generated repeatedly from the ODAG template app do not contain any access to the script and attached files unless the user is the link owner.

In a client-managed environment, the same applies when the user generating the ODAG/Dynamic View doesn't own the template app.

Environment

Resolution/Workaround

This is working as intended in Qlik Cloud. The decision was reached to ensure data and file security across the platform.

Qlik Sense Enterprise on Windows Client-managed provides a workaround, which was introduced in the August 2021 release.

The workaround requires the modification of a .json file:

Go to the ODAG service folder, for instance:
C:\Program Files\Qlik\Sense\OdagService\dist
Open defaults.json in a text editor and add IsKeepScriptAndFilesEnabled: true to the file. It should end up something like so:
{ "IsKeepScriptAndFilesEnabled": true }

NOTE

The configuration would need to be re-enabled after an upgrade/reinstall of sense.
The configuration applies to all ODAG/DV apps generated without exception.
The configuration may need to be set on all nodes in a multinode environment.
Services may need to be restarted for the change to take effect.

Internal Investigation ID(s):

GEO-1767
QB-669
00063335

Re: Qlik Sense: Script and files being removed when using ODAG & Dynamic views

sirpod90 — Mon, 12 Dec 2022 12:52:46 GMT

Is there a workaround for Qlik SaaS as well?

Re: Qlik Sense: Script and files being removed when using ODAG & Dynamic views

Sonja_Bauernfeind — Mon, 19 Dec 2022 13:14:03 GMT

Hello @sirpod90

Let me look into this for you!

All the best,
Sonja

Re: Qlik Sense: Script and files being removed when using ODAG & Dynamic views

Sonja_Bauernfeind — Thu, 22 Dec 2022 08:10:36 GMT

Hello @sirpod90

Our investigations have converged it seems: You've received additional information from a colleague of mine and I have updated the article to reflect our answer.

All the best,
Sonja

Re: Qlik Sense: Script and files being removed when using ODAG & Dynamic views

sirpod90 — Tue, 03 Jan 2023 09:54:20 GMT

Hello @Sonja_Bauernfeind

I now heard multiple times "it works as intended"

But I don't get the intention.

What is the point in seeing the data, but not seeing where the data is coming from?

There is only one exception for your security concerns:If any user runs the ODAG script, but the script is executed in the background by the original owner of the ODAG app. -> This means that editing the script makes it possible to have the script executed by another user.

But this is mostly not the case when working with ODAG.

ODAG is designed for big data and not for sensitive data (access to sections).

So if you prepare a data model and some standard or template scripts to navigate through a set of data, users can simply use a predefined data model and script and edit the specific parts for their needs.

In my case, the user has all the rights to edit, use and consume the data in the space.

So they are allowed to copy the ODAG master and template apps. They can run all the code and use the dedicated data connections, but there is still no script available for them, when running my ODAG app.

Furthermore, ODAG generated apps cannot use new features of the SaaS version, such as alerting or monitoring in the Hub, because automatic reloads are not possible, unless the owner of the master and template apps has created his own generated apps! Is that working as intended?

To be honest, if you don't change this feature in the SaaS version, there is no working big data concept yet for your SaaS version for me.

But I am happy to have a discussion about it.

Regards

Tobias

Re: Qlik Sense: Script and files being removed when using ODAG & Dynamic views

Sonja_Bauernfeind — Wed, 11 Jan 2023 12:59:33 GMT

Hello @sirpod90

Thank you for the in-depth reply. I fully understand where your request is coming from and believe that the next step here would be to log an Idea in our Ideation section. This is the expected method to provide feedback to our Product Team.

Please formulate your idea there and ping me in your reply so that I can a) give it a vote and b) forward it to your Account Manager to see if we can facilitate dialogue.

All the best,
Sonja