topic Re: Section access reload issue on server in QlikView

Section access reload issue on server

Tue, 25 Feb 2014 07:27:39 GMT

I have a qvw file with section access. The purpose is that, I want to restrict data visibility based on the attached file(just an example). Admin can see all country data, and users can only see their country data.

When I reload the file on desktop manually which is placed inside Qlikview\SourceDocument folder it runs fine, and then I use to place the qvw inside Qlikview\documents folder so that users can access via Access point. By following this process it works.

But, I want to be a scheduled run on the server, and I have created a task in QVMC which run fine. The document is also distributed to Qlikview\documents folder.

Now when i try to access the qvw using access point I get error msg: Failed to open the document, you might not have permission.

Why is this not working in scheduled run ?

below is my code for section access.

-----------------------------------------------------------------

Star is '*';

Section Access;

User:

LOAD LOGIN as NTNAME,

ACCESS,

COUNTRY_CD

FROM[QlikviewUsers.xlsx]

(ooxml, embedded labels, table is Sheet1);

User:

CONCATENATE LOAD * INLINE [

NTNAME, ACCESS, COUNTRY_CD

QV_ADMIN, ADMIN, *

];

Section Application;

User_Visiblity:

LOAD LOGIN as NTNAME,

PROFILE,

COUNTRY_CD,

COUNTRY_NAME

FROM[QlikviewUsers.xlsx]

(ooxml, embedded labels, table is Sheet1);

User_Visiblity:

CONCATENATE LOAD * INLINE [

NTNAME, PROFILE, COUNTRY_CD, COUNTRY_NAME

QV_ADMIN, Admin, ALL, *

];

----------------------------------------------------------------------------

I have also added QV_ADMIN user in the list through which all our Qlikview services runs on the server. I came to know about this somehow from the community and google.

What else I'm missing here or I need to do some other way ? Let me know if any more detail is required.

Any help is much appreciated.

Thanks,

Roushan

Re: Section access reload issue on server

Colin-Albert — Tue, 25 Feb 2014 07:33:14 GMT

Have you included the service account as an admin user with access to all data in the section access list?

Re: Section access reload issue on server

jfkinspari — Tue, 25 Feb 2014 07:38:11 GMT

Try and move the QV_ADMIN from the concatenated INLINE list to the Excel user list, and see if it makes a difference.

Re: Section access reload issue on server

nilesh_gangurde — Tue, 25 Feb 2014 07:43:29 GMT

Hi,

you have to give the admin rights to the account on which your all Qlikview servieces are running.

put one more line in your existing section access for the Serviece login ID

LOGIN	ACCESS	PROFILE	COUNTRY_CD	COUNTRY_NAME
Admin1	ADMIN	Admin	ALL	*
User1	USER	User	DK	Denmark
User2	USER	User	SE	Sweden
Service Login ID	ADMIN	Admin	ALL	*

Re: Section access reload issue on server

Tue, 25 Feb 2014 07:53:10 GMT

Yes, and that is QV_ADMIN account

Re: Section access reload issue on server

Tue, 25 Feb 2014 07:53:51 GMT

I already tried that by adding QV_ADMIN in the excel. But no Luck.

Re: Section access reload issue on server

Tue, 25 Feb 2014 07:54:19 GMT

I tried that, but makes no difference.

Re: Section access reload issue on server

Peter_Cammaert — Tue, 25 Feb 2014 08:00:13 GMT

When creating your Section Access table, always use the UPPER() function to convert USERID, PASSWORD, NTNAME and whatever to upper case. Especially when loading from an external source. Solves a lot of Section Access mysteries. Maybe yours will be solved too.

Best,

Peter

Re: Section access reload issue on server

Peter_Cammaert — Tue, 25 Feb 2014 08:10:58 GMT

Do I understand it correctly that before data reduction, you try to associate User_Visibility and User by way of two fields (NTNAME and COUNTRY_CD)? QV does not create synthetic keys for tables in Section Access...

Peter

Re: Section access reload issue on server

Peter_Cammaert — Tue, 25 Feb 2014 08:23:37 GMT

A solution to this can be to create a Users key from both NTNAME and COUNTRY_CD. The annoying thing is that you loose '*' functionality. You'll have to do the expansion yourself. Or just drop the NTNAME link.

It's no use to create a User_Visibility table with exactly the same fields as Users. User_Visibility will have one unique field that links to section access, and other fields that link to the rest of the data. It's contents is just a list of all possible countries that are available in your data, not in the security file. To see this, imagine that you have a country called GRMBL that has data available but no ordinary user should be able to see it. You'll expect QV_ADMIN to have access to GRMBL data, but QV_ADMIN only specifies *, and country GRMBL won't occur in your security excel. The * of QV_ADMIN will expand to all values from column COUNTRY_CD in table User_Visibility that doesn't include GRMBL...

Peter

Re: Section access reload issue on server

jfkinspari — Tue, 25 Feb 2014 08:55:45 GMT

I'm not sure I agree, when 'Star is * ' is explicitly specified.

I think you should remove the '' around the * (star), making it simply:

Star is *;

Re: Section access reload issue on server

Peter_Cammaert — Tue, 25 Feb 2014 09:14:38 GMT

I'm not sure I understand what it is you do not agree with. I certainly could have put it more clearly, sorry.

Peter

Re: Section access reload issue on server

er_mohit — Tue, 25 Feb 2014 09:22:57 GMT

in setting side of qlikview

for document properties-->security tab-->check on admin override security and

document properties-->opening tab -->check on initial data reduction based on section access

Re: Section access reload issue on server

Tue, 25 Feb 2014 12:15:44 GMT

Could you please provide an example code, how to work with ?

I tried UPPER() function, but no luck.

I also tried Star is * instead of Star is '*', this too didn't work.

Re: Section access reload issue on server

Tue, 25 Feb 2014 12:16:07 GMT

Settings have been taken care...still not working

Re: Section access reload issue on server

manojkulkarni — Tue, 25 Feb 2014 12:23:50 GMT

you should remove single quotes surrounding *,

Star is *;

Re: Section access reload issue on server

Tue, 25 Feb 2014 12:25:33 GMT

Yes, I used the same

Star is *;

Re: Section access reload issue on server

Tue, 25 Feb 2014 12:41:09 GMT

Can you try this?

Reload the Source Document,then save it.

Then run the task manually on the QMC, then it will distribute your application to the other users.

Now, try to access the document with differenct login credentials.

Regards

Siva Dandu

Re: Section access reload issue on server

Peter_Cammaert — Tue, 25 Feb 2014 12:49:38 GMT

I can't provide example code, I'll need an example model for that from you.

But the changes are simple.

In table Users, rename the COUNTRY_CD field to LINKFIELD, or something else.
Delete everything you listed in the above section application. Why? Identities and authentication belong in Section Access. In Section Application you'll provide authorizations only, which in your case means a simple link table listing individual countries.
In Section Application, create a new User_Visibility table and fill it with the country values that occur in your facts tables further on in your data model. Because this table in essence doesn't really do anything except "link", create rows with two fields (e.g. LINKFIELD and COUNTRY_CD) with identical values. If COUNTRY_CD is not the field that connects to the rest of the data model, replace it by something else. However, make sure that LINKFIELD still contains COUNTRY_CD values.

There are multiple solutions for this problem, but they differ mostly because of particular details in your application. And we have no information about that.

Best,

Peter

Re: Section access reload issue on server

Peter_Cammaert — Tue, 25 Feb 2014 12:57:17 GMT

And by the way, you may ask yourself how you can fill User_Visibility when the facts haven't even been loaded yet... Section Access doesn't have to be at the front of your script, you can put it at the end without any problems.

Peter