topic Re: Section Access Problem - User seeing all records in QlikView

Section Access Problem - User seeing all records

Sun, 16 Dec 2012 18:05:48 GMT

Hi,

In the Section Access, I have the following :

NTNAME, REGION

DOM1\ABC,AMERICA

DOM1\ABC,ASIA

DOM2\XYZ,EUROPE

Later in my resident tables, I have a few tables with the REGION column in them, but they only have data for AMERICA and ASIA.

When user ABC logs in, he sees data for REGION=AMERICA and ASIA only and everything works fine. However when user XYZ logs in, he is supposed to see data for EUROPE only, but since the other tables have no data for EUROPE, this user is expected to NOT SEE any data in the dashboard. But XYZ is seeing everything (i.e. all rows from every table). I tested with another user DEF who doesn't exist in the Section Access and even he is able to see everything.

Please suggest how to restrict the access for XYZ and DEF in the above example.

Thanks.

Re: Section Access Problem - User seeing all records

hic — Sun, 16 Dec 2012 18:14:53 GMT

Make sure you have a field "ACCESS" that is set to "USER" (in the same table as NTNAME) for the users that should have a restricted view of data.
Make sure "Settings"->"Document properties"->"Opening"->"Inititial data reduction ... " is set. Also, use strict exclusion. (I suspect that Strict Exclusion is missing in your case)
Make sure you have UPPER case in the REGION field. Both in data and in Section Access.

HIC

PS Make sure you have a backup copy...

Re: Section Access Problem - User seeing all records

Sun, 16 Dec 2012 18:44:38 GMT

Hi HIC,

Strict Exclusion seems to work, however when I check Strict Exclusion, user XYZ can't even open the document. Is that how it's supposed to behave ?

Also, for another user DEF who should always see everything, do I just need to change ACCESS to ADMIN ?

Thanks.

Re: Section Access Problem - User seeing all records

hic — Sun, 16 Dec 2012 18:56:20 GMT

That XYZ cannot open the document is expected. That is what will happen if there are no records corresponding to the restriction.

If you want the user DEF to see everything, there are the following options:

Make DEF an ADMIN user, and restrict him to something impossible, e.g. a blank space , "UTOPIA" or "ALL COUNTRIES". QlikView will try to make this selection and fail. Then QlikView will check if the user is ADMIN, and if so, open the doc with full data.
Assign a wildcard, * , to the DEF line. Then DEF will see all REGIONS listed in the Section Access table. Problem: REGIONS that exist in data but not in Section Access will be excluded.
Assign a generic symbol "<ALL>" that links to all countries. See more on http://community.qlik.com/blogs/qlikviewdesignblog/2012/10/02/complex-authorization

HIC

Re: Section Access Problem - User seeing all records

Sun, 16 Dec 2012 19:03:14 GMT

Thanks ! The message to XYZ - "Access denied to the document" is misleading...any way for XYZ to be able to open the dashboard but see blank charts/tables ?

Re: Section Access Problem - User seeing all records

hic — Sun, 16 Dec 2012 21:05:43 GMT

There is no setting for this. If there is no data - then you cannot open the file. And that's it.

What you could do, is to have a dummy record for each region. So that you have a record where REGION='Europe' and Country=NULL. Then the user will see the value Europe in the REGION list box, but all other list boxes will be empty.

HIC

Re: Section Access Problem - User seeing all records

Sun, 16 Dec 2012 21:11:48 GMT

Everything works fine when opened locally on my machine...however when I copied the qvw to the server and opened it from server with my id (same id opened it fine locally), its prompting for User ID. FYI, I am using NTNAME in the section access and server uses DMS Authorization.

Thanks.

Re: Section Access Problem - User seeing all records

hic — Sun, 16 Dec 2012 21:17:43 GMT

I suspect that it will not work directly with DMS authorization. To make it work, you need to have the web server request a ticket from the QlikView server. The user ID on the ticket will be compared to the NTNAME in Section Access.

HIC

Re: Section Access Problem - User seeing all records

Mon, 17 Dec 2012 00:59:39 GMT

Is there any document availabe online to elaborate what you mentioned ? Is there any other way around this ?

Thanks!

Re: Section Access Problem - User seeing all records

hic — Mon, 17 Dec 2012 09:55:25 GMT

There are plenty of documents on QlikCommunity about authentication, e.g. http://community.qlik.com/docs/DOC-2586 . See also the attached file.

About the dummy records: This is quite straightforward. Let's assume that you have your REGIONs in a country table:

Countries:

Load *, Upper(Region) as REGION From <sometable> ...

All you then need to do is to load the regions that you want the following way:

Concatenate (Countries) Load Upper(Region) as REGION inline

[Region

Europe

EMEA

APAC];

HIC