topic Section access including open access in QlikView

Section access including open access

shamili_sekar — Mon, 26 Mar 2018 10:24:16 GMT

Hi,

I have a tricky requirement related to Section access - not sure if this is possible currently within QlikView. With Section Access, I was able to restrict the views/data based on the AD group which a user belongs. However, I need a default bucket which will provide access to everyone without any restriction.

For example,

Group1, Apple

Group2, Mango

*, Grape

Is it possible to specify something like the third row, where any user who doesn't belong to Group 1 or 2 will be considered as the third group and it should show 'Grape'.

Thanks in advance,

Shamili

Re: Section access including open access

marcus_sommer — Mon, 26 Mar 2018 13:30:39 GMT

AFAIK no because the wildcard * means an applying to all listed values and not to all existing values. This meant you need to add all users respectively usergroups to your section access table maybe by creating an additionally master-group in which all other groups are a member or by reading your active directory: Active Directory: Extract Users and Groups.

- Marcus

Re: Section access including open access

Peter_Cammaert — Mon, 26 Mar 2018 14:21:29 GMT

Yes, you can if you use NTNAME as an identification field. Section Access using NTNAME will first try to match any explicit account IDs if they are available. If the ID isn't found or doesn't grant access because of other reasons (like data reduction), it will match the wildcard ID.

At least, that's how it works if you enable Data Reduction and Strict Exclusion in a new document using this as a load script. Better check it out yourself before you select a mechanism.

Section Access:

LOAD * INLINE [

NTNAME, ACCESS, LINK

domain\Account1, ADMIN, BANANA

domain\Account2, USER, ORANGE

*, USER, NUTS

Section Application;

ReducedTable:

LOAD * INLINE [

LINK, User

BANANA, Account1

NUTS, EveryOneElse

];

Note that when trying this script, ACCESS=ADMIN grants access to everything if other security measures (like data reduction) fail.