topic Re: Section access issue in QlikView

Section access issue

mohamed_ahid — Wed, 23 Dec 2015 13:26:58 GMT

Hi all,

I'm trying to achieve (if it is possible) a section access in which i identify user only by their Domaine name .

For exemple juste users belonging to Domaine1 are allowed to open\acces my application .Is it possible ?

The aim behind all this , is to allow two users from another domain to access the application (NTFS access on server ) and while openning the application ,the data will be restricted for them .

Any suggestions?

Thx

Re: Section access issue

swuehl — Wed, 23 Dec 2015 13:36:49 GMT

You can enter a NT domain group name in section access field NTNAME, but then you need to put all your users into the appropriate group.

Re: Section access issue

sasikanth — Wed, 23 Dec 2015 13:39:04 GMT

HI,

you can use NTNAME for that

section access;

LOAD * INLINE [

ACCESS, NTNAME

ADMIN,DOMAIN\ADMIN

USER,DOMAIN\USER

];

section application;

Re: Section access issue

mohamed_ahid — Wed, 23 Dec 2015 14:02:28 GMT

Have you an exemple plz ?

thx

Re: Section access issue

mohamed_ahid — Wed, 23 Dec 2015 14:03:06 GMT

that's what i'm using actually .what i want is instead of using DOMAIN\ADMIN i want juste to specify the DOMAIN .

Thx

Re: Section access issue

sasikanth — Wed, 23 Dec 2015 14:08:26 GMT

hi,

i didn`t understand one thing here ,

you are just allowing only Domain then what about the users

Do you want to allow all the users of that domain or what ?

Re: Section access issue

mohamed_ahid — Wed, 23 Dec 2015 14:39:15 GMT

Ill use NTFS authoriszation for that .

the section access is juste for data restriction . Every domaine is allowed to see data related to his area .

Re: Section access issue

sasikanth — Thu, 24 Dec 2015 06:53:39 GMT

HI,

You can check by just specifying Domain name

Section Access;

LOAD * INLINE [

ACCESS , NTNAME

ADMIN, DOMAIN1

ADMIN.DOMAIN2

];

Section Application;

i am not sure try once

Re: Section access issue

Peter_Cammaert — Thu, 24 Dec 2015 07:42:39 GMT

Every domain in AD has a group called Domain Users. You can use DOMAIN\GROUPNAME in Section Access just like DOMAIN\USERNAME (replace DOMAIN & Co with the values that are applicable in your environment). So I suggest you use that one to let SA grant access to anyone belonging to a particular domain.

Although IMHO I think you're making QlikView security quite difficult to manage.

Best,

Peter

Re: Section access issue

mohamed_ahid — Mon, 04 Jan 2016 10:48:03 GMT

Doesn't work .

Re: Section access issue

mohamed_ahid — Mon, 04 Jan 2016 10:55:47 GMT

I didn't get your idea .

My purpose is to manage security on two level :

on application acces on server : this is managed by the server by according licence to users .Liste of users is defined (or groups) by using NTFS authoriszation .

Second one is data restriction : i have to make possibe access to the application for new users coming new domain .But i have also to restrict data access to these users .

My idea was to open access by using ntfs authoriszation as usual and for data restriction by using section access .In this section i will use users groupe or domain rather than useranmes .

Any suggestion or sample application ?

Thx a lot

Re: Section access issue

Peter_Cammaert — Mon, 04 Jan 2016 11:13:54 GMT

Well I cannot improve on my previous answer. Except by explaining what you cannot do:

you cannot specify just a domainname in Section Access, because the field needs a domainname\username or domainname\groupname value. I already explained that every AD domain defines a default group called Domain Users, and all newly created users are automatically made member of this domain.

So if you use Domain1\Domain Users as an NTNAME value, and Domain2\Domain Users as a second value, Section Access will grant access to all users of Domain1 and Domain2.