topic Re: Use windows authentication for Section Access in QlikView

Use windows authentication for Section Access

Wed, 01 Apr 2015 20:43:34 GMT

Hello,

Is there a way to implement section access using user's windows authentication and not use the Excel file to store the admin usernames and passwords. Storing the values in an excel sheet is a route our team does not want to go.

Any help is much appreciated. Thank you!

Re: Use windows authentication for Section Access

prieper — Wed, 01 Apr 2015 21:21:46 GMT

you may use NT-name without password - so will be handed via Windows, so users might be handled without any extra list,

but you will need to specify somehow the administrators in a separate table

HTH Peter

Re: Use windows authentication for Section Access

Thu, 02 Apr 2015 14:47:41 GMT

Thank you Peter I tried using the NTNAME without password but it does not prompt me to enter credentials when i save and open the document.

Instead of user1( as mentioned below in example) in my app I have written my actual windows user id.

Am I missing any extra step here. I did go to Document properties -> Security -> check/uncheck the rights user has and checked Admin overrides property.

Access;

LOAD * INLINE [

    ACCESS, NTNAME

    ADMIN, user1

    USER, user2

];

Section Application;

Re: Use windows authentication for Section Access

Wed, 08 Apr 2015 15:06:29 GMT

Hello All,

I am struggling with this, can anybody please help.

Thanks you.

Re: Use windows authentication for Section Access

prieper — Fri, 10 Apr 2015 09:39:03 GMT

First command should be SECTION ACCESS.

You need to close the QV-application before re-opening an application, as QV "remembers" your rights - and the creator has ADMIN-rights till the application is closed.

Peter

Re: Use windows authentication for Section Access

hic — Fri, 10 Apr 2015 11:11:34 GMT

The NTNAME should work. But it does not prompt you for a userid - it just uses the credentials as supplied by the OS; that you used when you logged on to windows.

Use "Section Access" as the first statement and use upper case for the user names.

HIC

Re: Use windows authentication for Section Access

quwok — Fri, 10 Apr 2015 11:27:01 GMT

Did you make sure that the NTNAME is in the form <domain>\user1

Re: Use windows authentication for Section Access

Fri, 10 Apr 2015 17:46:09 GMT

I did write NTNAME in the form <domain>\user1. With username in uppercase.

My username is a mix of letters and numbers could that be a problem?

@Peter: After I closed -> reopened it -> tried to reload the data ->there is a dialog box that says ADMIN required-> After I hit OK -> I get the message saying Execution of Script failed. Even though I've given Admin access to myself.

My username is a mix of letters and numbers could that be a problem? Also I've written Section Access script in Hidden script window but added the Statement Section Access in the window where I have my main script. Is this the correct way to go?

Thank you all very much for your time. Appreciate all the help.

Re: Use windows authentication for Section Access

hic — Fri, 10 Apr 2015 18:39:39 GMT

Do you have a binary statement in your script?

Re: Use windows authentication for Section Access

Fri, 10 Apr 2015 18:41:55 GMT

Nope I dont have Binary statement, do I need to have it?

Re: Use windows authentication for Section Access

hic — Fri, 10 Apr 2015 18:54:06 GMT

No, it's usually a bad idea to combine binary and Section Access.

Re: Use windows authentication for Section Access

Bill_Britt — Fri, 10 Apr 2015 19:32:14 GMT

Hi,

Look at the attached QVW. The scripted has not been ran, so you can open it. The Section Access part of the script looks like this:

Section Access;

LOAD * INLINE [

ACCESS, NTNAME

ADMIN, DOMAIN\USER1

USER, DOMAIN\USER2

];

Section Application;

Take and replace DOMAIN|USER1 with your domain and user ID.

Bill

Re: Use windows authentication for Section Access

Anonymous — Fri, 10 Apr 2015 20:13:45 GMT

you stated ... 'Also I've written Section Access script in Hidden script window but added the Statement Section Access in the window where I have my main script.'

Looks like you added section access statement again before your main script starts..

You need to remove it...

//hidden tab

Section Access;

LOAD * INLINE [

ACCESS, NTNAME

ADMIN, DOMAIN\USER1

USER, DOMAIN\USER2

];

Section Application;

// main tab

...your main script goes here....

Re: Use windows authentication for Section Access

Mon, 13 Apr 2015 14:20:24 GMT

Thanks Bill for the application. I changed my code to use the same format as you suggested.

amarbogam‌ : Removing section access from my main code helped solve the reload problem.

Another problem I am still encountering is that I've made changes to not allow user to Reload. But when the user opens the app he sees the reload icon as active. Also I would assume the users not listed in Section Appliction should encounter some error when they try to open the document, but they are able to open the document.

I made user related security changes in Settings-> Document Properties -> Security; any other place i need to update these changes?

Thank you very much for all your time and patience.