topic Re: Prevent users from using other user & password in QlikView

Prevent users from using other user & password

behdadian — Sun, 12 Aug 2018 06:32:55 GMT

Hi all,

I'm new to Qlikview Server and I've got a problem with users not setting secure passwords for their windows.

Authentication in our system is based on OSUSER and Windows passwords. but because most users have set easy passwords for their windows, other may use their user and password in qlikview and access documents they don't have access to.(browser like mozilla firefox gives you the ability to login with multiple usernames)

How can I prevent users from inputting their user name and just read the data from their windows (active directory)? is there an easy solution for that?!

Re: Prevent users from using other user & password

Or — Sun, 12 Aug 2018 10:44:06 GMT

You can set up QlikView-specific authentication using the USERID and PASSWORD tags. See https://help.qlik.com/en-US/qlikview/November2017/Subsystems/Client/Content/Security.htm

Keep in mind that this will make you wildly unpopular with your users and prevent them from changing their passwords, meaning you'll likely have to provide regular reminders. If someone has unauthorized access to one of your user's computers, they can probably access plenty of other things that are sensitive (emails, documents, etc), so at that point just hiding QlikView models seems like it wouldn't achieve much.

If you do insist on working this way, I would suggest having just one relatively simple master password for all the users / models. That way, anyone accessing a user's computer would still need to know / guess the QlikView password, but your users only have to remember one (simple!) password for everything.

Re: Prevent users from using other user & password

passionate — Sun, 12 Aug 2018 13:57:44 GMT

use some other techniques apart from NTNAME for section access

Re: Prevent users from using other user & password

marcus_sommer — Mon, 13 Aug 2018 07:16:57 GMT

I agree with orsh_ that you have not a specific QlikView issue else a general security problem which should be adressed to your IT admins which are responsible for the active directory in your company.

Further I doubt that the user could specify directly any windows-user within the firefox-profiles so that using NT as authentication in QlikView will work well and secure as far as there basic-rules for windows-password are applied.

- Marcus