topic Re: Section Access and Access Point in QlikView

Section Access and Access Point

jonathan_dau — Wed, 21 Dec 2011 09:32:48 GMT

Hi all !

I am actually working on a Qlikview application and trying to implement a Section Access based on NTNAME and a Section Application to reduce data.

Here is the code I use for that

SECTION ACCESS ;
LOAD * inline [
 ACCESS,NTNAME,PIVOT,DIVISION,SKILL_CENTER
 ADMIN,DOMAIN\USER,PIV_TOUS,DIV_TOUTES,SC_TOUS
];
concatenate LOAD 
     upper([ACCESS]) as ACCESS, 
     upper(NTNAME) as NTNAME, 
     upper(PIVOT) as PIVOT, 
     upper (DIVISION) as DIVISION, 
     upper (SKILL_CENTER) as SKILL_CENTER
FROM [..\Access\PIVOT_TO_USER.xls]
(biff, embedded labels, table is PIVOT_TO_USER_Create$);
SECTION APPLICATION ;

STAR IS TOUS;
SECURITE_PIVOT:
LOAD * inline [
 PIVOT,Pivot_Id
 ALL_PIV,TOUS
];
Concatenate
LOAD PIVOT as PIVOT, 
     Pivot_Id
FROM [..\Access\PIVOT_TO_USER.xls]
(biff, embedded labels, table is PIVOT$);
QUALIFY*;
VArtest:
noconcatenate load *
Resident SECURITE_PIVOT
where Exists(PIVOT,'ALL_PIV');
UNQUALIFY*;

SECURITE_DIVISION:
LOAD * inline [
 DIVISION,Pivot_Unit_BU_Code
 ALL_DIV,TOUS
];
Concatenate
LOAD upper(DIVISION) as DIVISION, 
     upper (Pivot_Unit_BU_Code) as Pivot_Unit_BU_Code
FROM [..\Access\PIVOT_TO_USER.xls]
(biff, embedded labels, table is DIVISION$);

SECURITE_SKILL_CENTER:
LOAD * inline [
 SKILL_CENTER,Pivot_Unit_SC_Code
 ALL_SC,TOUS
];
Concatenate
LOAD upper([SKILL CENTER]) as SKILL_CENTER, 
     upper (Pivot_Unit_SC_Code) as Pivot_Unit_SC_Code
FROM [..\Access\PIVOT_TO_USER.xls]
(biff, embedded labels, table is [SKILL CENTER$]);

As you can see I load an .xls file which contains all users but I keep my user ADMIN inline to be sure that I can always access the application.

I apply the settings for Data Reduction

This code does work

- with my user (inline) I can reload the application and reduce data if I change the access rights

- with the same user I can open the application on the Access Point and data are reduced

- with other users that are in the xls file, access is granted and data are reduced but only on Qlikview desktop

The only problem is when other users (who are in the xls file) try to open the application from the access point, it asks them a USERID and PASSWORD !!!

This is strange because the security is based on NTNAME then the Access Point should recognize directly the NTNAME and should grant the access. Plus it appears to me that sometimes it is working and sometimes it doesn't !!

Does anybody have an answer to this problem ??

Re: Section Access and Access Point

jonathan_dau — Wed, 21 Dec 2011 10:45:49 GMT

By the way I forgot to say that the Qlikview versions are different

- Qlikview desktop is 10 SR3

- Qlikview server is 9 SR7

There maybe an impact ?

Re: Section Access and Access Point

Miguel_Angel_Baeyens — Wed, 21 Dec 2011 10:56:29 GMT

Hi,

That should work in both versions without issues. The NTNAME as you point in your example code above, is in the form DOMAIN\USERNAME. Is that for all users? Do you have any proxy or something that may be preventing credentials to pass from the client on to the Server? If you create an empty new document without section access and no script, but with a textbox with this expression

=Upper(OSUser())

What the users see when they open the document?

Regards.

Miguel

Re: Section Access and Access Point

jonathan_dau — Wed, 21 Dec 2011 11:25:34 GMT

Hi Miguel and thank you for your answer,

To answer your questions :

- The NTNAME as you point in your example code above, is in the form DOMAIN\USERNAME. Is that for all users?

Yes and in our excel file we find for all users DOMAIN\USERNAME though it is in lowercase (which could not be a problem because we use upper()

- Do you have any proxy or something that may be preventing credentials to pass from the client on to the Server?

I have to say that I don't know
What is strange is that the application was working yesterday for all users in the excel file and suddenly would not work !!??

- If you create an empty new document without section access and no script, but with a textbox with this expression

what we did is to create a text box with OSUser() as you said to be sure that QV actually finds our login. It works and give the DOMAIN\USERNAME both on Desktop and through access point.

I start thinking that the problem comes from the way I built my excel file.

I will try to generate QVD from this excel file to see what happens.

Thank you again and if you have any idea please share it with me.

Regards