topic Re: Admin vs User in QlikView

Admin vs User

Anonymous — Tue, 31 May 2016 11:14:01 GMT

Does anyone can detail all the differences between the two access types - Admin and User (defined in section access)?

Re: Admin vs User

beck_bakytbek — Tue, 31 May 2016 12:15:08 GMT

Hi Dagan,

it is very easy, as admin: you have an Access to all tabrows and you can determine what the user can see (restricted access) and ac user: you can see only by admin restricted tabrows / objects.

If you want to have any examples to this issues, so let me please know, i hope that helps

beck

Re: Admin vs User

Anonymous — Tue, 31 May 2016 12:17:16 GMT

Thanks. I would be glad to get some examples. thanks

Re: Admin vs User

jonas_rezende — Tue, 31 May 2016 12:21:07 GMT

Hi, Tomer Dagan.

See like is defined in Qlikview Reference Manual.pdf.

"29.5 Access Levels in Section Access

Access to QlikView documents can be authorized for specified users or groups of users. In the security table, users can be assigned to the access levels ADMIN or USER. If no access level is assigned, the user cannot open the QlikView document. A person with ADMIN access can change everything in the document. Using the Security page in the Document Properties and Sheet Properties dialogs, a person with ADMIN access can limit the users’ possibilities of modifying the document. A person with USER privileges cannot access the Security pages. Note! ADMIN rights are only relevant for local documents! Documents opened on a Server are always accessed with USER rights. "

Follows a link as an example. https://community.qlik.com/servlet/JiveServlet/previewBody/1853-102-2-3345/Introduction_to_Section_Access_-_Rev_1-1.pdf

Hope this helps!

Re: Admin vs User

Peter_Cammaert — Tue, 31 May 2016 12:36:09 GMT

In the AccessPoint there is no difference. ADMIN users are treated just the same as regular USERs.

In QV Desktop it depends on what permissions you assign and what kind of security you implement. The big difference between an ADMIN user and a USER user is that you cannot shut out an ADMIN from a document if his/her credentials appear in the section access table. A USER has to live by the restrictions that were set by the developer. An ADMIN can get in and undo/change everything. Except for an optional hidden script.

Best,

Peter

Re: Admin vs User

beck_bakytbek — Tue, 31 May 2016 12:42:31 GMT

Hi Dagan, this my way of proceeding, if you copy those steps on the base of your own example, you have then automaticaly the solution to your issue:

step 1:

load following scrip:

// Section Access

Access:

Load * INLINE [

Access, USERID, PASSWORD, Link

ADMIN, admin, admin, *

USER, user1, user1, US

USER, user2, user2, UK

];

Sales

Load * Inline [

Link, Country, Sales

US, USA, 150

UK, United Kingdom, 250

];

then you shoud save as Securty1.qvw and reload

and conform that each user is associated with the values that are expected ( you see: as admin you will not be associated with any countries- this is ok)

Save your document as Security2.qvw.and edit the script and uncomment the Section Access Statement. and again you should reload your document and the USERID fiélds will become unavailable.

now, very importing steps:

Settings menu > Select Document Properties and click on the Opening tab and turn on the Initial Data Reduction Based on Section Access Option. Make sure that Sctrict Exclusion is selected

Save and Close your Document:

from the Settings menu, select User Preferences, make sure that the Remember Login Credentials Until QlikView Exits Option is unchecked and click OK

Reopen your document Security2.qvw, try logging in as any of users (user1/user2). it is expected that the users see only one Country. Close your document and reopen it and log in as admin. Edit the script and in the Access table, Change the Link field Name from Link to LINK.Repeat this step for Link field in the Sales table.

Reload and save your document. Close and reopen the document. Log in ac user1. only USA should be listed. the same step you can use for User2, and if you log in as User2 so you see only United Kingdom

Dagan, let me know you have any questions. i hope that helps

beck

Re: Admin vs User

Anonymous — Tue, 31 May 2016 13:29:47 GMT

Thanks a lot!

Re: Admin vs User

Anonymous — Tue, 31 May 2016 13:31:16 GMT

what about sharing bookmarks with other users? any differences?

Re: Admin vs User

Peter_Cammaert — Tue, 31 May 2016 13:37:18 GMT

As long as Server Collaboration has been enabled globally and for your particular document, everyone can share bookmarks. As I said before, in the AccessPoint there is no ADMIN role. Everyone is treated as a USER.

Best,

Peter

Re: Admin vs User

Anonymous — Tue, 31 May 2016 13:40:37 GMT

how do I check this? - Server Collaboration has been enabled

Re: Admin vs User

Peter_Cammaert — Tue, 31 May 2016 13:50:21 GMT

Do you have access to the QlikView Management Console? Then there are two places to check:

Server Objects (globally): QMC->System->Setup->QlikView Servers->Your server->Documents->Allow Server Objects. This switch must be enabled before you can proceed to the next level.
Server Objects (document level): depends on whether you have a Publisher or not. Without a publisher, go to QMC->Documents->User Documents->Select your document->Server->Server Objects and enable "Allow creation of Server Objects". Then from the listbox select the users that are allowed to create server objects.
If you do have a Publisher, change the corresponding settings in the Distribute task, as it will overwrite any User Documents settings you may have configured.

Best,

Peter

Re: Admin vs User

Anonymous — Tue, 31 May 2016 14:21:25 GMT

Thanks. both of them are checked and ok.

I'm asking this because a user cannot share a document with other user and I can't find the problem.

Re: Admin vs User

Peter_Cammaert — Tue, 31 May 2016 14:40:13 GMT

Ah, right. That's a QlikView trap!

Document bookmarks can - by definition - only be assigned when opening the document in QV Desktop and creating a bookmark. At that moment, there are no other users to share with. And moreover, after publication document bookmarks are always available to other users in the AP because they are stored in the document itself without any restrictions.

The story changes whenever you use QV Desktop to open a document with "Open in Server...". QV Desktop now changes into an IE Plugin-like client with features that are available to AP visitors only. Now you can't create document bookmarks anymore (the file cannot be changed) but you can create Server bookmarks using the same dialog box (have a look at what the checkbox title above your blue arrow has become...) and the Share bookmark checkbox will become active. Finally...

It needs to getting used to.

Peter

Re: Admin vs User

Anonymous — Tue, 31 May 2016 14:52:47 GMT

what is AP?

so that means that in order to create a bookmark a user has to connect via QV desktop and not via Explorer? then it will enable sharing?

Re: Admin vs User

Peter_Cammaert — Tue, 31 May 2016 15:02:53 GMT

AP = AccessPoint.

No, QV Desktop can be used as a client just like your browser when connecting to the AccessPoint. In the browser client, you create bookmarks and share them via the Repository, in QV Desktop as an AccessPoint client, you create server bookmarks with the same Bookmarks dialog as shown in your screenshot and mark them as shared overthere.

Peter