topic Re: How to enable document access only for a specific Windows group? in QlikView

How to enable document access only for a specific Windows group?

Wed, 18 Sep 2013 14:49:38 GMT

Dear users,

I want to enable access to a Qlikview document on my Qlikview Server only for a specific windows user group. Other users must be restricted from accessing the document. The document will thus not be viewable in the Qlikview Acesspoint.

First I'll explain my folder and group structure at my Qlikview server.

Currently I have 3 groups: Qlikview Administrators, Qlikview Users and SMV.

Qlikview Administrators and Qlikview Users are the default group

SMV is the group I created myself.

My folderstructure is as follows:

Qlikroot
|_Applications

|_QlikviewDocumentfolder-1
|_QlikviewDocument-1.qvw

|_QlikviewDocumentfolder-2

|_QlikviewDocument-2.qvw
|_Data
|_Lib
|_Scripts

Qlikview Administrators have read/write access to Qlikroot and all subfolders.

Qlikview Users have read/write access to Applications and by default all subfolders.

Now I have a folder - for example - QlikviewDocumentfolder-1 with a document inside called QlikviewDocument-1.qvw.

The only group who can acces the folder Qlikview Documentfolder-1 must be SMV, so others don't see the document in the Qlikview Accesspoint. How can I achieve this?

Re: How to enable document access only for a specific Windows group?

marcus_malinow — Wed, 18 Sep 2013 14:54:07 GMT

Nazeem,

this should be fairly simple. In Windows just set up permissions on the folder for the SMV group, and remove permissions for Qlikview Users, and possibly also Qlikview Administrators. Be careful though! You wouldn't want to restrict the document so that the QlikView service account wasn't able to access it.

Marcus

Re: How to enable document access only for a specific Windows group?

Wed, 18 Sep 2013 15:09:55 GMT

Thank you for your reply.

But the people in the group SMV are also in the group Qlikview Users.

If I deny read/write access to the specific folder for users in group Qlikview Users, that option will have precedence to the allow-access for the users in group SMV.

I did the following:

Deny folder acess for group Qlikview Users

and allow folder acess for group SMV.

The result was that the users did not see the Qlikview document in the folder. I thought it was because of the deny-access for Qlikview Users.

I always understood that every user at least must be in the group Qlikview Users in order to access Qlikview Documents on the Qlikview Accesspoint.

Re: How to enable document access only for a specific Windows group?

marcus_malinow — Wed, 18 Sep 2013 15:28:20 GMT

Nazeem,

denying access to QlikView users will not stop SMV users from being able to access your document.

It may take some time for the change to be reflected in AccessPoint though.

Marcus

Re: How to enable document access only for a specific Windows group?

marcus_malinow — Wed, 18 Sep 2013 15:28:46 GMT

Oh, and don't take your SMV users out of the QlikView users group

Re: How to enable document access only for a specific Windows group?

kangaroomac — Thu, 19 Sep 2013 08:02:54 GMT

Hiya,

I would follow a two tier approach. First, being windows folder security - rather than denying access to groups, why not just include the group you want to have read acess to (i.e. only SMV for your Documentfolder-1).

The second tier is Section Access. (Please remember to make a backup before applying Section Access). The second tier will also enable that if the doucment is moved to a different location, with different folder security, your document should still be secure to be only viewed by users that are part of the SMV group.

Hope this helps.