topic Re: Data Reduction in AccessPoint in QlikView

Data Reduction in AccessPoint

Thu, 24 Apr 2014 19:59:51 GMT

I have a need to publish a document with reduced data for some users and full data for other users. When i have 'Strict Exclusion' unchecked, all users can see everything in Access Point, but when i check 'Strict Exclusion' the users that should see reduced data are denied access to the document altogether.

Do anyone know what I should be looking at?

Re: Data Reduction in AccessPoint

swuehl — Mon, 28 Apr 2014 18:00:30 GMT

Hi Ashley,

"If this check box is marked in combination with Initial Data Reduction Based on Section Access, strict exclusion will be used when reducing the data. This means that access to the document will be denied whenever the field values in the section access reduction fields lack matches in their corresponding section application field. This, however, does not apply for users with Admin status, who instead will see the unreduced data set if there are no matches. This setting is enabled by default in documents created with QlikView 7.02 and later and is recommended for maximum access security."

So I would start checking the values of the reduction field (also make sure that you use the reduction FIELD names in upper case, as far as I remember), comparing between the section access and the FIELD values in section application.

If possible, you can also upload a small sample application that demonstrates this issue (with sample data, and please add the login credentials 😉 ), which may make it easier for us to spot the issue.

Regards,

Stefan

Re: Data Reduction in AccessPoint

Mon, 28 Apr 2014 18:41:11 GMT

Yes, I have checked that the field names are capitalized, and the values in the field are numeric so that's not the issue. Also I have verified that that values I'm reducing on are contained in the data. I'll work on a sample to upload.

Re: Data Reduction in AccessPoint

Tue, 29 Apr 2014 13:54:59 GMT

So I was trying to create a sample of this that I can attach but I'm not sure how to replicate it since I'm using NT authentication for the data reduction. The sample I created used generic user ID's created Inline in the script, and they work as they should in Access Point, so it seems the issue only happens when I'm using NT authentication. Is there any use in uploading a sample knowing that?

Re: Data Reduction in AccessPoint

mphekin12 — Tue, 29 Apr 2014 14:02:28 GMT

When using NT authentication, are the NT Names your using in your Section Access file in the Domain\Username format?

Re: Data Reduction in AccessPoint

Tue, 29 Apr 2014 14:55:24 GMT

I have tried both with and without the domain name with the same result

Re: Data Reduction in AccessPoint

Bill_Britt — Tue, 29 Apr 2014 15:06:55 GMT

To start create a simple QVW with a text box using OSuser(). This will tell you what QV is seeing the user ID as.

See attached

Bill

Re: Data Reduction in AccessPoint

SunilChauhan — Tue, 29 Apr 2014 15:32:48 GMT

still not clear with your requirement

we are using NT name

where we have define access to users using NTname using Excel file like below

Access, NTName,Field name( say Region)

Admin,domain\username1,*

User,domain\username2,Asia

Note here field name is used for Reductionand load using'

Section access

load Upper(Access) as Access,

upper(NTName) as NTName,

upper(Region) as Region

from Xlspath

section application;

now in document setting -> Initial Data Reduction Based on Section Access and strict exclusion(check Both)

reload and check access

Re: Data Reduction in AccessPoint

Tue, 29 Apr 2014 15:55:47 GMT

It shows the domain/username, but either way, the restricted user is still denied access to the document when I have 'Strict Exclusion' enabled.

Re: Data Reduction in AccessPoint

Tue, 29 Apr 2014 15:56:42 GMT

What you describe is the way i have my document set up. And your user with access to only Asia data can get into the document via AccessPoint?

Re: Data Reduction in AccessPoint

SunilChauhan — Tue, 29 Apr 2014 15:59:12 GMT

No ,

I mean to say user username1 will see all data say 4 regions

where as username2 will see 1 Region data remaining 3 Regions not visible to him.

hope this helps

Re: Data Reduction in AccessPoint

mphekin12 — Tue, 29 Apr 2014 16:11:32 GMT

Are you saying the issue is only when you try to access your file via AccessPoint? If this is the case, do you have your service account information set up correctly in QEMC (System -> Setup -> Distribution Services -> Advanced -> Username and Password are set up and correct in the Section Access section)?

Re: Data Reduction in AccessPoint

Tue, 29 Apr 2014 16:15:41 GMT

I'm not sure how that affects it... I can only put in one username and password there, and i have multiple users that need restricted access. But to clarify.. the issue is in AccessPoint but only when i have 'Strict Exclusion' applied on the document settings. I can't say for sure what would happen if the same users tried to access the document in the QV application as they are not developers and only have access to QV docs via AccessPoint.

Re: Data Reduction in AccessPoint

Bill_Britt — Tue, 29 Apr 2014 19:41:51 GMT

Hi Ashley,

It would appear that something is wrong with your script. If you can post it here and then we can see if we see anything. If you don't want to do that you can send it to me or wuehl offline.

Bill

Re: Re: Data Reduction in AccessPoint

Wed, 30 Apr 2014 15:05:26 GMT

Here's the test qvw i've been using to test.

**With Section Access commented out so you can open it

Re: Re: Data Reduction in AccessPoint

mphekin12 — Wed, 30 Apr 2014 15:10:24 GMT

Ashley,

Can you comment out the Section Access section, reload the application then repost it? I am unable to open it.

Thanks!

Re: Re: Data Reduction in AccessPoint

Wed, 30 Apr 2014 17:17:31 GMT

Edited my previous comment to attach a version with commented Section Access.

Re: Data Reduction in AccessPoint

Bill_Britt — Wed, 30 Apr 2014 17:26:41 GMT

Hi Ashley,

I just tested and still can't open document. Make sure you reload it after you comment out the section access

Bill

Re: Data Reduction in AccessPoint

mphekin12 — Wed, 30 Apr 2014 17:28:09 GMT

Did you do a refresh after you commented out the Section Access section? I'm still getting an 'Access Denied' error message.

Re: Re: Data Reduction in AccessPoint

Wed, 30 Apr 2014 17:36:29 GMT

I thought i did but maybe it's because i also still had Strict Exclusion checked. Try this one.