topic Re: How to load encrypted data that will be decrypted ony client side? in QlikView

How to load encrypted data that will be decrypted ony client side?

nicolas_martin — Thu, 17 Nov 2016 17:23:33 GMT

Hello,

I have the following problem: one of my client wants to give me encrypted data and want me to create dashbord from it.

When he connects to the application (using the access point), the user enter a passphrase that would decrypt the data.

The QVW application should never have the real data, and me, as administrator of the server, neither.

My first guess was to use an AES JavaScript function to decrypt values in the expressions. Unfortunatly, JS and VBS functions can only be called during script, not in expressions.

With the desktop client, I manage to do something with a "partial reload" that would take an existing table and reload it with a "decrypt" function (AES JS). Unfortunatly, the "partial reload" doesn't work on the access point.

I've made some progress with a macro using the "DynamicUpdateCommand" function.

To be simple, my client sends me data with all values divided by X, I load this data, and when he connects to the application, he has a button "decrypt" that do a DynamicUpdateCommand to multiply the encrypted fields by X.

This works fine, BUT... only if the user is on the "QlikView Administrators" Windows group, and it's not an option.

Do you have any idea how I can do that?

- The server have to never have the decrypted data.

- Any user / admin server side can have access to the decrypted data.

- Only user on the access point with the correct key can see the decrypted data.

Thank you.

Re: How to load encrypted data that will be decrypted ony client side?

rwunderlich — Thu, 17 Nov 2016 18:00:50 GMT

You actually can use module functions in expressions if you enable the setting:

AllowMacroFunctionsInExpressions=1

-Rob

http://masterssummit.com

http://qlikviewcookbook.com

Re: How to load encrypted data that will be decrypted ony client side?

nicolas_martin — Fri, 18 Nov 2016 08:43:10 GMT

Thank you!

Is it possible to make it a document property, not a "server property" or a "desktop client" property?

Re: How to load encrypted data that will be decrypted ony client side?

rwunderlich — Sat, 19 Nov 2016 20:44:56 GMT

I don't know of any way to make it apply to a single Document only.

-Rob

http://masterssummit.com

http://qlikviewcookbook.com

Re: How to load encrypted data that will be decrypted ony client side?

jerifortune — Mon, 02 Apr 2018 14:04:28 GMT

Hi Rob,

Is there a solution for QlikSense since it doesn't support macro? I have a requirement to encrypt data at rest (QVD) and decrypt at app level.

Thanks