topic Re: Section Access in QlikView

Section Access

Mon, 02 Dec 2013 20:03:02 GMT

There are a million posts about section access and I think reading them is making me more confused.

I am trying to apply simple logic that would look like....

section Access;
LOAD ACCESS,
     USERID,
     PASSWORD,
     GROUP
FROM
[..\Passwords\QV_Passwords.xlsx]
(ooxml, embedded labels, table is CompPlan);

section application;
LOAD USERID,
     SECURITY_DEPT
FROM
[..\Passwords\QV_Passwords.xlsx]
(ooxml, embedded labels, table is CompPlan);

ACCESS	USERID	PASSWORD	GROUP	SECURITY_DEPT
ADMIN	ADMIN	ADMIN	ADMIN
ADMIN	M00768	BMGCOMP	ADMIN
ADMIN	M01122	BMGCOMP	ADMIN
ADMIN	M09849	BMGCOMP	ADMIN
USER	M09000	BMGCOMP	CHIEF	SURGERY

The blanks in Security Department should be ALL departments. I have tried combinations with * and 'Star is *' (which I still do not understand) but when I run the script the reduction for 'M09000' works correctly and when I sign in as an ADMIN everything is blank.

Is there a way to say ALL departments without listing out every single one (There are quite a few!)??

Re: Section Access

Mon, 02 Dec 2013 20:28:35 GMT

I have tried *, ALL and <ANY>....

Re: Section Access

Mon, 02 Dec 2013 20:31:58 GMT

Hi Katie,

you can create a table like below

SecurityDesc,SECURITY_DEPT

ALL,SURGERY

SURGERY,SURGERY

etc

and link Security Desc with Section access.

and you can use ALL in admin.this way you can solve your problem

Re: Section Access

Mon, 02 Dec 2013 20:34:37 GMT

I tried...

USERID	SECURITY_DEPT
ADMIN	ALL
M00768	ALL
M01122	ALL
M09849	ALL
M09000	SURGERY

and when I run the ap, close it and sign in everything is null.

BUT when I sign in as 'M09000' I only see SURGERY

Re: Section Access

Mon, 02 Dec 2013 20:35:52 GMT

can you post sample qvw

Re: Re: Section Access

Mon, 02 Dec 2013 20:49:08 GMT

hi,

Have a look at attached sample file for section access

following is credentials

ACCESS, USERID, PASSWORD, SD

ADMIN, A, A,ALL

ADMIN, B, B,ALL

ADMIN, C, C,ALL

USER, D, D,SURGERY

Re: Section Access

Mon, 02 Dec 2013 20:55:04 GMT

HAHA... you beat me to it! I was in the process of building a sample.

From looking at your sample I think the answer to my question is that I will have to write out every single Security Department?

Application;
LOAD SD,Security_Dept INLINE [
    SD, Security_Dept
    ALL, SURGERY
    ALL, OPD
    ALL,TEST
    SURGERY,SURGERY

There are many different departments and we are trying to get away from hard coding each one. We would like to give 4 people in the organization administrative rights to EVERY department, even if a new department is added to our database. If they are hard coded we would have to be notified of a new department and manually go in and update it each time.

PS- thanks for your help!

Re: Section Access

Anonymous — Mon, 02 Dec 2013 21:00:00 GMT

It is hard to see what the problem is without an example. There are no other departments in the data to see. Anyway, two recommendations:

1. Avoid using system field (USERID in your case) as a data reduction field in section application. Use GROUP instead.

2. It is always a good idea to use upper() function even if you know that the data is in the uppercase already.

Regards,

Michael

Re: Section Access

Nicole-Smith — Mon, 02 Dec 2013 21:01:12 GMT

If you want them to view all departments, you can give them access to *, which will automatically give them access to all. The following is from QV documentation:

A wildcard, i. e. *, is interpreted as all (listed) values of this field, i.e. a value listed elsewhere in this table. If used in one of the system fields (USERID, PASSWORD, NTNAME or SERIAL) in a table loaded in the access section of the script, it is interpreted as all (also not listed) possible values of this field.

Re: Section Access

Mon, 02 Dec 2013 21:14:57 GMT

hi,

instead of hard coding you can do it using script like

load

'ALL' as SD

Security_Dept

FROM

TABLE;

UNION

load

Security_Dept as SD

Security_Dept

FROM

TABLE;

it will give you all security dept with ALL as SD.

Re: Section Access

Tue, 03 Dec 2013 13:40:40 GMT

Thanks guys, I think you are right it is difficult to explain without a sample.

I have attached a sample dashboard. In the section access I am trying to assign each CHIEF to his or her department. The ADMINs should be able to see all departments (listed and not listed!).

And then part 2 that I haven't tackled yet... The ADMINs should be able to see all tabs but the CHIEFS should only be able to see tab 1. I found an example that used the GROUP column to achieve this but I haven't tried it yet since I can not seem to get the simple section access to work.

Any advice would be greatly appreciated.

Re: Section Access

Tue, 03 Dec 2013 13:47:59 GMT

Create a field AA

And a table with AA and SECURITY DEPT that will make the link between the generic keys (like ALL) and the real keys of your model:

AA, Security Dept

ALL, Dept1

ALL, Dept2

ALL, Dept3

SURGERY, Dept5
etc.

AA field must be placed into your section access. You can use ALL because it is an existing value now.

Fabrice

Re: Re: Section Access

Anonymous — Tue, 03 Dec 2013 13:57:11 GMT

Try this

Re: Section Access

Tue, 03 Dec 2013 14:02:29 GMT

Hi Michael, That seems to be working but I don't understand how. For section access if you want the person to have access to everything you do not need to list them in the section application part?

Re: Section Access

Anonymous — Tue, 03 Dec 2013 14:10:33 GMT

Katie,

It is the data reduction field where values can be replaced with * or blank or 'ALL. SECURITY_DEPT is not a data reduction field, hence it doesn't do anything to add these *...
In your application, you use USERID as data reduction field. Not a good idea because you must have real values there, cant use * nor blanks nor 'ALL'. What I did:
- Added the new field for data reduction and called it REDUCTIONFIELD. It is a copy of USERD, except it is blank for ADMIN users. It could be done in your section access load inline, adding one more column, instead of my join.
- Replaced, in section application, USERID with the new REDUCTIONFIELD, and removed lines with *.

Regards,
Michael

Re: Re: Section Access

Nicole-Smith — Tue, 03 Dec 2013 14:12:33 GMT

Katie,

Here is another option that does use the *. I have also applied security to the sheets (Sheet Properties > General > Show Sheet > Conditional).

Re: Section Access

Tue, 03 Dec 2013 14:13:10 GMT

Thank you for your help! I think I still need to do some reading in regards to section access.

Re: Re: Section Access

Tue, 03 Dec 2013 14:25:54 GMT

Hmmm... I hate to keep bothering you but I am testing it and signing in as different people and it seems as though the ADMIN users can only see those departments listed in the section access. Is there a way to include ALL departments not just those that are listed?

Re: Re: Section Access

Anonymous — Tue, 03 Dec 2013 14:44:14 GMT

Now I don't understand...

First, there are no departments listed in Section Access. There are fields ACCESS, USERID, PASSWORD, GROUP, and I added REDUCTIONFIELD. That's it...

Next, I tried again, as all four admin users (ADMIN, M00768, M01122, and M09849) - they can see all Departments. Including CARDIAC and OBGYN which are not listed in the first load inline of the section application.

Are you sure we're looking at the same application?

Re: Section Access

Nagaraju_KCS — Tue, 03 Dec 2013 14:44:46 GMT

Hi Michel,

I faced same problem here,

Star is *;

SectionAccess.txt file like this

ACCESS	NTNAME	PASSWORD	GROUP	SECURITY_DEPT
ADMIN	DOMAIN/ADMIN	ADMIN	ADMIN	*
ADMIN	DOMAIN/M00768	BMGCOMP	ADMIN	*
ADMIN	DOMAIN/M01122	BMGCOMP	ADMIN	null()
ADMIN	DOMAIN/M09849	BMGCOMP	ADMIN
USER	DOMAIN/M09000	BMGCOMP	CHIEF	SURGERY

i have column like SECURITY_DEPT some fields * and null()

but data it shows wrong....