topic Re: Section Acess in Qlikview in QlikView

Section Acess in Qlikview

puneetagarwal — Wed, 25 Nov 2020 16:16:04 GMT

Hi All,

We are trying to apply section access at row-level. We've written the NTName and Access and in an excel and loaded in the script for the user and the admin. later we have Enable the check box for "Initial Data Reduction Based on Section Access" from Document Properties.

The Issue is when we are trying to login with user at access point and check the dashboard its not getting logged in and we are getting logged out of QlikView automatically.

Can someone please let me know what is to be done?

Regards,

Puneet Agarwal

Re: Section Acess in Qlikview

YoussefBelloum — Thu, 26 Apr 2018 07:45:47 GMT

Hi,

would you be able to put the section access after an exit script, reload, scramble the data and attach the app ?

Re: Section Acess in Qlikview

Anonymous — Thu, 26 Apr 2018 07:48:57 GMT

Hi Puneeth,

The below link will helps you, to get fair understating about the Section Access concept.

QlikView Section Access Examples

Thanks,

Venkata Sreekanth

Re: Section Acess in Qlikview

puneetagarwal — Thu, 26 Apr 2018 08:58:17 GMT

Thanks Venkata

But i did not get my answer in that document.

Thanks,

Puneet

Re: Section Acess in Qlikview

puneetagarwal — Thu, 26 Apr 2018 09:00:50 GMT

Hi Youssef,

I kept it at the start of the edit script through excel and later enabled the data reduction.

Thanks,

Puneet

Re: Section Acess in Qlikview

YoussefBelloum — Thu, 26 Apr 2018 09:04:41 GMT

Actually I was wondering if you would be able to attach the document the way I described above ?

Re: Section Acess in Qlikview

Miguel_Angel_Baeyens — Thu, 26 Apr 2018 09:07:05 GMT

If you are using data reduction within the data model (not by using the "Initial reduction based on.." property in the document settings), make sure all users have values in such fields that have a matching value in the data model, otherwise you could be locked out.

In case you are using it, it's worth noting that the "*" in section access means all values in section access table but not all possible values in data model.

Also, the NTNAME is always in the form of DIR\USER where

DIR is either
- the name of the DSC (when using DMS authorization) as set in the QMC > Directory Service Connectors
- the name of the domain in Windows (when using NTFS)
USER is the username according to the security system in place (SSO, AD, etc.)

Comment your section access, create a new text object in the application with the function

=OSUser()

and make sure that the value returned is exactly what you are using in the field NTNAME section access table.

Re: Section Acess in Qlikview

YoussefBelloum — Thu, 26 Apr 2018 09:17:17 GMT

Hi mbaeyens

above you were talking about "strict exclusion", right ?

Re: Section Acess in Qlikview

puneetagarwal — Thu, 26 Apr 2018 09:36:44 GMT

Yes Youssef.

Re: Section Acess in Qlikview

YoussefBelloum — Thu, 26 Apr 2018 09:42:45 GMT

ok, i was asking this question to Miguel because he was talking about being locket out if the value don't match between the section access and the data present on the model, and I didn't see "strict exclusion".. and I know that it is only the strict exclusion that can do this

Re: Section Acess in Qlikview

Miguel_Angel_Baeyens — Thu, 26 Apr 2018 11:24:14 GMT

Correct. I have edited my post from "will" to "could"

Re: Section Acess in Qlikview

Miguel_Angel_Baeyens — Thu, 26 Apr 2018 11:25:31 GMT

Sure. But he mentions that the user gets "logged out" which probably means the strict exclusion is enabled for the document (or there are no NTFS permissions if NTFS is used)

Re: Section Acess in Qlikview

YoussefBelloum — Thu, 26 Apr 2018 11:53:56 GMT

haha ook

actually I was just curious, maybe there is something else related to section access that can can logout users if there is not matching values.

Thank you

Re: Section Acess in Qlikview

YoussefBelloum — Thu, 26 Apr 2018 11:55:37 GMT

Sorry didn't pay enough attention..

Re: Section Acess in Qlikview

puneetagarwal — Thu, 26 Apr 2018 13:17:56 GMT

Hi Miguel,

Need your help on this. Please check the below code:

Section Access;

LOAD *, Upper(NTNAME) as User;

LOAD * INLINE [

ACCESS, NTNAME

ADMIN, User3

USER, User2

USER,User1

];

Section Application;

User_Reduction_Data:

LOAD * Inline [

Region, User

USA, User1

German, User2

*,User3

];

Note:When i'm trying to login with User1 and User2 i'm able to see the data for respective regions.

But when i'm trying to login with User3 who is Admin and should see all the regions in QV. Instead of displaying all the regions data for User3 its displaying "*" instead.

Regards,

Puneet Agarwal

Re: Section Acess in Qlikview

olivierrobin — Thu, 26 Apr 2018 13:25:51 GMT

add

star is * before loading user_reduction_data

and star is ; after

Re: Section Acess in Qlikview

puneetagarwal — Thu, 26 Apr 2018 13:30:19 GMT

Hi Olivier,

Can you please elaborate?

Re: Section Acess in Qlikview

olivierrobin — Thu, 26 Apr 2018 13:32:22 GMT

before your load instruction , add

star is *;

after your load, add

star is;

so that your code looks like :

star is *;

User_Reduction_Data:

LOAD * Inline [

Region, User

USA, User1

German, User2

*,User3

];

star is;

Re: Section Acess in Qlikview

Miguel_Angel_Baeyens — Thu, 26 Apr 2018 13:34:26 GMT

Exactly. The meaning of "*" in section access has been largely discussed, but to follow your example, I would make sure of 2 things

One is that the users can open the app, which seems to be the case.

The other regarding the "*", you need to create a line for each value you want the user to see. If this means all values, you need to create as many lines as values you have. For instance:

// Use field names and field values in UPPERCASE when they are going to be used in section access, always!

User_Reduction_Data:

LOAD * INLINE [

REGION, USER

USA, DIR\USER1

GERMANY, DIR\USER2

];

// Here's the trick: USER3 has access to ALL values in the field REGION

CONCATENATE

LOAD DISTINCT

REGION

'DIR\USER3' AS USER

FROM CountryTable.qvd (qvd); // or whatever the source it might be, RESIDENT, XLS, table in SQL, etc.

Let's say you have a new USER4 who should also see ALL countries. Now you can use the "*"

User_Reduction_Data:

LOAD * INLINE [

REGION, USER

USA, DIR\USER1

GERMANY, DIR\USER2

*, DIR\USER4

];

// Here's the trick: USER3 has access to ALL values in the field REGION

CONCATENATE

LOAD DISTINCT

REGION

'DIR\USER3' AS USER

FROM CountryTable.qvd (qvd); // or whatever the source it might be, RESIDENT, XLS, table in SQL, etc.

My suggestion when you want to use the "*" in section access is that you create a dummy value, or use an actual ADMIN user, and do this with him, then you can use the * if you need to. Conceptually, something like

Reduction_Table:

LOAD DISTINCT // the data model may have several repeated values, you only want the distinct ones

'DIR\DUMMY' AS NTNAME // any actual ADMIN account or a completely fake one

COUNTRY_CODE

FROM Table.qvd (qvd);

//Real users and admins table

// Users ADMIN and BOSS will see all countries

// User1 only ES

// User2 ES and US

LOAD * INLINE [

NTNAME, COUNTRY_CODE

DIR\ADMIN, *

DIR\USER1, ES

DIR\USER2, ES

DIR\USER2, US

];

Re: Section Acess in Qlikview

puneetagarwal — Thu, 26 Apr 2018 13:51:18 GMT

Thanks so much Olivier

It worked