topic Re: Section script meaning in QlikView

Section script meaning

vijaysahu2 — Wed, 25 Nov 2020 16:16:04 GMT

Section Access;

Load 'USER' As ACCESS,

'*' AS NTNAME,

'* 'AS EMPLOYEE ID

autogenerate 1;

Section application;

I have above load statement in my section access ..what two * tells. There are other statement was before this load which I understood what they are doing but this is confusing me.

Re: Section script meaning

simospa — Fri, 31 Aug 2018 15:15:06 GMT

Hi Vijay,

this script seems to add a single row of Section Access

ACCESS	EMPLOYEEID	NTNAME
USER	*	*

About the meaning, this part of script provide access for profile USER (profiles are ADMIN or USER) to all [EMPLOYEE ID] and all NTNAME specified in other parts of your script. This part of script provide access to all NTNAME and EMPLOYEE ID already declared in the section access.

For example, if you have only this two rows

ACCESS	EMPLOYEEID	NTNAME
USER	*	*
ADMIN	JACK SPARROW	domain\jsparrow

it means that user with admin profile jsparrow has a USER profile too.

But note that if in your AD there is a user called JAMES BOND, domain\jbond, he cannot has access to QV Document because the wild card works only for info explicited for that column.

It could be useful to see the other part of script to better understand.

Bye.

Simone

Re: Section script meaning

Peter_Cammaert — Fri, 31 Aug 2018 15:17:01 GMT

It probably means that all Windows accounts have access as Role=USER to everything field [Employee ID] links to.

Re: Section script meaning

Peter_Cammaert — Fri, 31 Aug 2018 15:19:10 GMT

I don't think that is true (about the wildcards in field NTNAME). For NTNAME and related fields, they behave differently.

Re: Section script meaning

simospa — Fri, 31 Aug 2018 15:38:19 GMT

Peter,

I cannot do anything but trust in you

I never tried to apply wildcards on "system" fields of section access.

A simple test that vijay could do could be try to access with a user with NTNAME not in the list of explicit values.

Sorry if my answer was not correct

Simonoe

Re: Section script meaning

Peter_Cammaert — Fri, 31 Aug 2018 15:53:16 GMT

No problem and no need to apologize. I make mistakes too. All the time

There is a nice technique to completely lock down a document for public distribution. Only specific accounts should be able to *open the script editor, *change sheets/objects, etc. It works with only few SectionAccess entries, like:

ACCESS, NTNAME

ADMIN, Domain\Username

USER, *

Everyone will have access with Role=USER, except for the listed account who will be ADMIN and able to do *advanced* things. The star will match any account that isn't found in the NTNAME field...

Re: Section script meaning

vijaysahu2 — Sat, 01 Sep 2018 12:38:28 GMT

Hi Simone/ Peter

Below is the full script in section access

Section Access;

LOAD 'USER' As USER,

'AUD\' & MANAGER_ID As NTNAME,

EMP_ID

Resident usernames;

Concatenate

LOAD ' ADMIN' As ACCESS,

'AUD\VIJ123' As NTNAME,

'*' As EMP_ID

Autogenerate 1;

Concatenate

LOAD ' ADMIN' As ACCESS,

'AUD\QLIK_ADMIN' As NTNAME,

'*' As EMP_ID

Autogenerate 1;

Concatenate

LOAD ' USER' As ACCESS,

'*' As NTNAME,

'*' As EMP_ID

Autogenerate 1;

Section Application;

Drop table usernames;