topic Re: Section Access - dual right (ADMIN & USER) in QlikView

Section Access - dual right (ADMIN & USER)

stuwannop — Mon, 07 Jul 2014 10:46:55 GMT

Hi everyone

I recently encountered a problem in section access where for some reason I could not access a document through the access portal but I could access through the client. I understand that document access through the access point is done on USER credentials only so that solves the problem.

My question is, can you set up section access so my NTNAME can be a USER and and ADMIN? I need to be able to develop the apps in the client but I also need full access to them through the access portal.

I hope that's clear - thanks for any help.

Stu

Re: Section Access - dual right (ADMIN & USER)

amit_saini — Mon, 07 Jul 2014 10:57:01 GMT

Stuart,

Please see the attachment and check script .

Username: admin

Password: admin

Thanks,

Re: Section Access - dual right (ADMIN & USER)

fkeuroglian — Mon, 07 Jul 2014 10:58:34 GMT

Hi Stuart, your user(domain/ntname) is in the secction acces? you have credencial to acces to it? and license in the acces point?

Re: Section Access - dual right (ADMIN & USER)

stuwannop — Mon, 07 Jul 2014 11:02:31 GMT

Yes - it is in the script as ADMIN, I have a user cal.

Re: Section Access - dual right (ADMIN & USER)

fkeuroglian — Mon, 07 Jul 2014 11:05:11 GMT

you should acces if you are in section acces and have license..

what error or msg do you have?

for other users works ok? to acces to the application in the acces point?

Re: Section Access - dual right (ADMIN & USER)

stuwannop — Mon, 07 Jul 2014 11:09:33 GMT

Thanks both. I get how it works my issue is if you set a user up as ADMIN in the section access script they cannot access the document through the access portal, but setting up as a USER you can.

So, my section access script looks something like this:

Section Access;

LOAD * INLINE [

ACCESS, NTNAME, Region

ADMIN, HEADOFFICE\JOHN.SMITH,*

USER, HEADOFFICE\FRANK.GRIMES, NORTH

];

So in the example above, Frank Grimes can access the document through the portal (and only see North) but John Smith cannot - he gets the error - "you do not have access to this document" (qlikview licences are fine they are both USER CAL).

Now apparently you need USER access to access a doc through the portal so that means JOHN SMITH would need both USER AND ADMIN access (as he is the developer as well. I tried the Section Access script below but still not luck:

Section Access;

LOAD * INLINE [

ACCESS, NTNAME, Region

ADMIN, HEADOFFICE\JOHN.SMITH,*

USER, HEADOFFICE\JOHN.SMITH,*

USER, HEADOFFICE\FRANK.GRIMES, NORTH

];

As you can see I have JOHN.SMITH as a USER and ADMIN but I still get the same problem.

Thanks

Stu

Re: Section Access - dual right (ADMIN & USER)

stuwannop — Mon, 07 Jul 2014 11:11:46 GMT

As long as they are defined as a "USER" in the section access script it is fine, only when I define as an ADMIN does the problem occur through Access Point. My error message is in my other post.

Stu

Re: Section Access - dual right (ADMIN & USER)

Bill_Britt — Mon, 07 Jul 2014 11:11:57 GMT

Hi,

All users that access the document through the access point are considered "Users" and have only the rights that are given them in the reduction column.

Bill

Re: Re: Section Access - dual right (ADMIN & USER)

fkeuroglian — Mon, 07 Jul 2014 11:16:09 GMT

Stuart,

i assume you have INICIAL DATA REDUCTION in document properties.. (to use data reduction ok), you have check te strict exclusion too?

please uncheck and try it again

Re: Section Access - dual right (ADMIN & USER)

SunilChauhan — Mon, 07 Jul 2014 11:16:17 GMT

i Thought we can provide only one kind of access

either partial access-> user access

full Access-> Admin

and i dont think if any person has full access then we can make him User with less permission.

i mean we can have either full or partial access

hope this helps

Re: Section Access - dual right (ADMIN & USER)

stuwannop — Mon, 07 Jul 2014 11:17:57 GMT

Thanks Bill - I (or John Smith in my example) would be both a user and an Admin. I.e. I need to be able to access the doc through the portal and develop it through the client, but if I set myself up as an admin in the section access script it means I can't access it through the portal. I get the error "you do not have access to this document".

Stu

Re: Section Access - dual right (ADMIN & USER)

Bill_Britt — Mon, 07 Jul 2014 11:27:43 GMT

Hi,

Let me explain this a little more. The Admin right is used to reload a document and build a document. So, if you look at the below. You would think that USER5 would be able to see all Regions because of the " * ". However, that is incorrect. Being none of the users are assigned to see OCEANIA, Bob will not be able to see it either he is allow to see "All listed values" not all values of the field. This is a big mistake that people make in the access point. Now if you notice the ADMIN is blank and can see all values in the desktop.

Section Access;

LOAD * INLINE [

ACCESS, USERID, PASSWORD, REGION

ADMIN, ADMIN, ADMIN,

USER, USER1, U1, AFRICA

USER, USER2, U2, AMERICA

USER, USER3, U3, ASIA

USER, USER4, U4, EUROPE

USER, USER5, U4, AMERICA

USER, USER5, U5, *

];

Section Application;

SALES:

LOAD * INLINE [

REGION, PROFIT

AFRICA, 1000

AMERICA, 2000

ASIA, 3000

EUROPE, 4000

OCEANIA, 5000

];

Re: Section Access - dual right (ADMIN & USER)

Bill_Britt — Mon, 07 Jul 2014 11:28:57 GMT

Hi,

There is no way to do it that way. You will have to have a test user to test it in the accesspoint.

Bill

Re: Section Access - dual right (ADMIN & USER)

stuwannop — Mon, 07 Jul 2014 11:35:51 GMT

Thanks Bill that answers my question. I require both full Admin through the client and access through the portal. I'm a little surprised that when you set yourself as an Admin user type you can't access through portal but I suppose it kind of makes sense - it's just a little awkward.

I think what I'll have to do is when I'm developing I will change my user type to admin then when I upload the document to the server I will change myself back to being a user.

Thanks for the advice.

Stu