topic section access in QlikView

section access

heimo_ernst_wei — Wed, 06 Feb 2013 13:32:19 GMT

I 've created a "section access".

Now I get a somehow "strange" behaviour, but I did not find what my error is:

Fields are: ACCESS, GRUPPE, NTSID, SALESMAN, SYSTEM

In case I have for ACCESS USER and a valid value for SALESMAN the user defined by NTSID is able to open the file (and the restriction apply accordingly)
In case I have for ACCESS USER and a no value for SALESMAN (this means NULL) the user defined by NTSID is NOT able to open the file
In case I have for ACCESS ADMIN and a no value for SALESMAN (this means NULL) the user defined by NTSID is able to open the file

The purpos is to allow a sales-person to see only data linked to his customers whlie other users sahll see all customers (respectively "all" data)

I 've tried it with a * in the field SALESMAN as well as with the first character of teh relvant value and a * but this did not help either.

I would be gald for any idea how to solve the problem.

Heimo

Re: section access

Wed, 06 Feb 2013 15:46:33 GMT

Pl Refer http://community.qlik.com/qlikviews/1116

Re: section access

heimo_ernst_wei — Wed, 06 Feb 2013 16:40:47 GMT

Thank you for your proposal

However I am not generating my list via "inline" I do an import from SQL-database

Formula: UPPER(If (Gruppe = 'SALES',"Test",))as SALESMAN;

But.:

UPPER(If (Gruppe = 'SALES',"Test",*))as SALESMAN;

does not work and

UPPER(If (Gruppe = 'SALES',"Test",'*'))as SALESMAN;

neither

Regards Heimo

Re: section access

Wed, 06 Feb 2013 17:13:10 GMT

If you upload sample application, that will be great..

Using "*" in section access doesn't mean "all values for field" but "all listed values for field within section access". If you want a user to get all information, set nothing instead the asterisk for any admin user, and as many lines as possible values for each user.

Hope that helps

Also i will suggest store section access data into the Qvd and then load into application. Use NTID not NSTID.

Re: section access

heimo_ernst_wei — Thu, 07 Feb 2013 09:12:25 GMT

Thanks for your answer.

I know the selection coming from using * however I wanted to test if they can open the file then at least.

I do not have a *.qvd

I have tried the same approach with NTNAME but there is no difference.

The code which I am using is simple:

Section access;

SET vCatalog = 'cee_datawarehouse';

CONNECT TO [Provider=SQLOLEDB.xxxx);

STAR is *;

Load

UPPER("Access") as ACCESS,

UPPER("SID") as NTSID,

UPPER("System") as SYSTEM,

UPPER("Gruppe") as GRUPPE,

UPPER(If (Gruppe = 'SALES',"rp_id_m",))as SALESMAN;

SQL SELECT * FROM "cee_datawarehouse".dbo."QlikViewProperties";

Section application;

....

The result is then (if put the same Load-statement in the Section application):

ACCESS

GRUPPE

NTSID

SALESMAN

SYSTEM

USER	POLENGF	S-1-5-21-xxx-123		AT
USER	SALES	S-1-5-21-xxx-124	AT94	DE

ADMIN

S-1-5-21-xxx-125

The user S-1-5-21-xxx-123 cannot open the file

The user S-1-5-21-xxx-124 is able to open the file and gets the right data-set.

The user (admin) S-1-5-21-125 is able to open the file and gets the full data-set

Heimo

Re: section access

heimo_ernst_wei — Thu, 07 Feb 2013 12:49:54 GMT

I found the solution:

in Document Properties / Opening "strict exclusion" was selected - this leds to the behavior as described above.