topic Re: How to check if a qlikview document has hidden script in QlikView

How to check if a qlikview document has hidden script

Anonymous — Tue, 22 May 2018 08:05:32 GMT

How to check if a qlikview document has hidden script

Re: How to check if a qlikview document has hidden script

jonathandienst — Tue, 22 May 2018 08:09:57 GMT

Open the script editor, go to the File Menu. if the document has no hidden script, then there will be a menu option "Create Hidden Script" and the other hidden script options are grayed out.

Re: How to check if a qlikview document has hidden script

Anonymous — Tue, 22 May 2018 08:17:14 GMT

Thanks Jonathan,

Not greyed out.

But when I grep on the .qvw file for 'SectionAccess' it identifies as it exists.

My concern is that it is somehow using a hidden script to check access in a external SectionAccess file.

How can one convert qvw to readable format to check any access to external file or code calling ?

Re: How to check if a qlikview document has hidden script

Anonymous — Tue, 22 May 2018 08:34:33 GMT

Okay.

I have 2 qvw documents.

one has if grep -a on .qvw

<HasSectionAccess>false</HasSectionAccess>

<SectionAccessAny>false</SectionAccessAny>

Other does not have SectionAccess at all.

Re: How to check if a qlikview document has hidden script

jonathandienst — Tue, 22 May 2018 08:41:36 GMT

>><HasSectionAccess>false</HasSectionAccess>

Are you interpreting this to mean that there is a section access element in the load script? I think you may be mistaken, but perhaps there was one in the past for this document (or the template on which it was based) but is not there any more. The other document never had section access so the XML tags have not been created.

That's my 2c worth, but I could be wrong of course...

Re: How to check if a qlikview document has hidden script

marcus_sommer — Tue, 22 May 2018 12:55:32 GMT

There is no section access active in this application:

<HasSectionAccess>false</HasSectionAccess>

says it quite clearly. Whereby it seems that the app had had at some time it applied because a new (empty) application contained not this meta-data. The following meta-data are default entries and each application have them whereby the first one is controlled from the option to filter the app-visibility in the access point from the tab server within the document properties (bottom right one) but it's meaningless if there is no section access table.

- Marcus

Re: How to check if a qlikview document has hidden script

Anonymous — Wed, 23 May 2018 09:21:35 GMT

I do have a qvw that seems to have hidden script.

how to confirm

attached screenshot.

Re: How to check if a qlikview document has hidden script

Anonymous — Wed, 23 May 2018 09:22:03 GMT

Re: How to check if a qlikview document has hidden script

marcus_sommer — Wed, 23 May 2018 09:53:17 GMT

There must not mandatory be any hidden scripts within this. That all options are greyed out could also be caused from the security settings of the application in tab security.

Beside this some parts of the script might be outsourced in include-variables: The $(Include) which you $(Must_Include) into your toolkit. Also is it possible to create load-statements at the run-time, for example by loading load-statements or part of them from tables and assigning them to variables which are then read and executed.

Please check your load-script for it and should you didn't find anything please explain why you think that there are further script-parts which do unexpected things.

- Marcus

Re: How to check if a qlikview document has hidden script

Anonymous — Thu, 24 May 2018 01:03:14 GMT

Thanks Marcus,

No i did not find any external scripts.

Would be good if qlik could provide a tool that could

dump out the scripts to a txt file for reading.

Re: How to check if a qlikview document has hidden script

marcus_sommer — Thu, 24 May 2018 07:10:39 GMT

There are at least three different methods possible. One would be to export the document layout (could be automated with macros) and another would be the use of prj-folders in which everything from a qvw is stored by saving them.

If only the script is relevant than would be a direct reading with a macro probably more sufficient. Here some links what is meant:

Re: Is it possible to export document layout from a command line ?

Re: Macro to export Script Module and Table Viewer

And of course it could be done manually after finishing / altering a script from the menu in the script-editor.

- Marcus