topic QlikView: Document Availability settings in QMC in QlikView

QlikView: Document Availability settings in QMC

ankitaag — Sat, 16 Nov 2024 02:14:37 GMT

Hi All,

I have mounted 10 Application folders in QMC having 20+ docs in each one of them, out of which only 3-4 to be shown in Access Point. Currently all my 200+apps are being shown in AccessPoint which I do not want. I know that by changing the Availability settings in User Documents for each app will work (Ref screenshot attached). But since, I have 200+ docs I do not want to do it manually, so is there any way to change this setting in any config or setting file to avoid manual work?

Thanks and Regards,

Ankita

Re: QlikView: Document Availability settings in QMC

Brett_Bleess — Mon, 21 Oct 2019 19:40:53 GMT

I would venture the easier way to accomplish things in this case is to use NTFS permissions on the files to 'hide' them from the users. Had you done your folder structure differently, you could have used the 'Browsable' check box in the QVS settings in the QMC to restrict things, but since you have browsable and non-browsable in the same folder, the only 'easy' solution of which I know is to use NTFS to only allow the service account access to those you want the users not to see and leave those that they should see set to the Local Users etc. such that they will see those... Need further use case details if this is not what you are looking for.

When you use the Documents\User Documents area to change things, those settings are generally stored to the associated .meta files, and those are not editable. If you do things in Documents\Source Documents, those are going to be part of the QVPR file information, which will be pushed to the QVServer using a QVServer distribution, you did not say whether or not you have Publisher license, if so, there may be a way to edit the QVPR file(s) to do this, but things may or may update on the QVS side of things as some settings only push on the initial run of the task and the QDS App Data may need to be cleared and recreated with a full push from the QMS service to populate everything such that the distributions will be updated properly.

This is likely a bit confusing, but this is a fairly complex topic to try to explain in the Community post, but hopefully this helps explain things a little.

Regards,
Brett

Re: QlikView: Document Availability settings in QMC

ankitaag — Tue, 22 Oct 2019 10:50:57 GMT

Thankyou so much for your reply.

I do not have publisher license so no access to Source Documents section. However I tried to change one of the QVPR html file and tried to give the default property of the check boxes to 0, but didn't work -- as you said "as some settings only push on the initial run of the task and the QDS App Data may need to be cleared and recreated with a full push from the QMS service to populate everything such that the distributions will be updated properly. "

I think either I opt to do it manually -- which is next to impossible ( I have more than 500 apps, 200+ was an idea) or I try to change my folder structure (Create separate folders for non browsable ones) and the reload jobs (if required).

Regards,

Ankita

Re: QlikView: Document Availability settings in QMC

Brett_Bleess — Tue, 22 Oct 2019 12:19:01 GMT

Yeah, so you are reloading the apps in place, the apps the QVS is using, the only way you have to configure things would be NTFS rights restricting the ones you do not want users to see or changing your folder structure such that you can mark the ones you do not want visible not browsable. Here are a couple of Help links as well:

https://help.qlik.com/en-US/qlikview/April2019/Subsystems/QMC/Content/QV_QMC/QMC_System_Setup_QlikViewServers_Folders.htm

https://help.qlik.com/en-US/qlikview/April2019/Subsystems/QMC/Content/QV_QMC/QMC_System_Setup_QlikViewWebServers_AccessPoint_ServerConnections.htm

I believe the easiest fix for you would be to leave the files that have tasks on them, the ones you do not want the users to see as they are and move just the ones you want them to be able to see to new folders, but that could break the tasks on those, just FYI, been a while since I did Reload Engine setup etc. Actually, the easiest thing is likely the NTFS rights, as that should do the trick quite nicely, just remove the 'users' from the files you do not want them to see and that should hide things in the AccessPoint page, that is likely the easiest solution for you and should not be too much work hopefully, might be able to write a PowerShell script to do that for you potentially... Sorry I do not have anything better for you.

Just be sure the Qlik service account maintains Full Control over the files you are trying to hide from the users, as without that, your reloads will likely fail...

Regards,
Brett

Re: QlikView: Document Availability settings in QMC

ankitaag — Tue, 22 Oct 2019 12:34:42 GMT

If I understood maintaining NTFS rights -- it is manually adding user names in folder's security option. If yes, then again not possible, but if no then please guide me through.

Otherwise, the only left option now I see is to move the non browsable apps in new folders and uncheck the browsable option, this way my tasks remains intact.

Thanks and Regards,

Ankita

Re: QlikView: Document Availability settings in QMC

Brett_Bleess — Tue, 22 Oct 2019 12:41:19 GMT

If you simply remove the local users security group from the apps you do not want users to see, that should do the trick... As long as the QV service account is a local Admin, it should still have full rights via the Administrators local security group. Not sure if it would be faster to change folder level and push down to files and then reset the files the users need to see, I think that would be given you said there were only 3 apps per folder that needed to be visible...

Regards,
Brett

Re: QlikView: Document Availability settings in QMC

ankitaag — Tue, 22 Oct 2019 13:11:18 GMT

It's not working, I removed local user group and Domain user groups in one of the app's security but it is still showing on Access Point (Logged in with a user account and not admin account). Only admin accounts have access to now

Re: QlikView: Document Availability settings in QMC

Brett_Bleess — Tue, 22 Oct 2019 13:46:49 GMT

If you changed things on the folder do not forget you have to push that change down to the files in the folder... Believe there is a checkbox on the Advanced settings to do that, but I suspect that is what you missed here...

Regards,
Brett

Re: QlikView: Document Availability settings in QMC

ankitaag — Tue, 22 Oct 2019 13:57:22 GMT

I did not not do this change in the entire folder but to an app inside it (to check the working).

Steps followed:

App Right click -- Properties -- Security tab -- Advanced button -- Permissions tab -- Selected Domain Users -- Click edit -- uncheck "Include inheritable permissions from the object's parent" -- ok -- Remove -- apply

Regards,

Ankita

Re: QlikView: Document Availability settings in QMC

Brett_Bleess — Tue, 22 Oct 2019 14:08:50 GMT

Are you running QVServer in NTFS or DMS security mode? QMC\System\Setup\QVS resource\Security tab settings...

Regards,
Brett

Re: QlikView: Document Availability settings in QMC

ankitaag — Tue, 22 Oct 2019 14:12:07 GMT

NTFS

PS: Thankyou so much for your quick responses and time.

Re: QlikView: Document Availability settings in QMC

Brett_Bleess — Tue, 22 Oct 2019 14:26:54 GMT

Ok, so given NTFS, that means QVS is relying upon Windows to determine Authorization, something has to be wrong in the changes you made, can you do the Effective Permissions in the Advanced area and put in the username to be sure it reports back they have no access?

Found a nice site that has a lot of screenshots etc. that should help here, but that is the best way to confirm what you actually have, as I think something is still granting access here.

https://www.thewindowsclub.com/effective-permissions-tool-windows

Regards,
Brett

Re: QlikView: Document Availability settings in QMC

ankitaag — Tue, 22 Oct 2019 15:35:30 GMT

Ok, so removing domain user groups or local groups doesn't help, but Denying permissions did.

Now what am I doing is, moving all the non browsable apps in a sub folder inside browsable folder and denying all the permissions from the Domain user group, this way those apps are not visible on Access Point. 🙂

You saved my lot of time. I really appreciate your kindness and patience.

Thankyou so much for resolving this. Have a good day!

Regards,

Ankita

Re: QlikView: Document Availability settings in QMC

terrykavouras — Fri, 19 Jun 2020 18:00:39 GMT

Hey Brett,

I found this topic in Community and I have a similar issue I'd like your help with. I have a number of docs that are used by NPrinting, but I don't want them visible to users. All the apps use Section Access. This is important because I can't put the documents in a non-browsable folder because NPrinting accesses the qvw using the user's credentials. So if the doc is in a non-browsable folder, NPrinting will fail because it can't find the document. I thought I had found a solution by clearing the Access Method options, that is, clearing the IE Client and the Full Browser and Small Device Version check boxes (User Documents > Server > Availablity > Access Method). This works except when I reload the qvw the Access Method options get reset - they are both checked, that is, they are both enabled. This seems like a bug to me, by the way; why allow me to alter the Access Method if it's going to be reset after a reload. Anyway, I need a solution. If I can set the Access Method and have it stay cleared (unchecked) that would work. Otherwise I need another solution if you know of one.

p.s. How the heck are you? I really miss you and my other QlikPals. Hope you're doing well.

Re: QlikView: Document Availability settings in QMC

terrykavouras — Fri, 19 Jun 2020 18:03:40 GMT

Forget my last email. I just found the Availability option in the Source Documents task definition. I'm an idiot. Anyway, I think I know what to do now.