topic Re: How can I do a binary load excluding the section access? in QlikView

How can I do a binary load excluding the section access?

pablomind — Wed, 25 Nov 2020 16:16:04 GMT

Hi, I have a question for the experts out there. I have a Binary Load (data models, data, everything) that has a section access. I need this binary load for one document but without the section access. Is this possible?

Regards,

Pablo

Re: How can I do a binary load excluding the section access?

Clever_Anjos — Mon, 11 Sep 2017 13:52:00 GMT

As long as I know: no

Re: How can I do a binary load excluding the section access?

vishsaggi — Mon, 11 Sep 2017 13:54:06 GMT

May be save a copy of this qvw file without section access and use this copy as Binary Load in that one document.

Re: How can I do a binary load excluding the section access?

Miguel_Angel_Baeyens — Mon, 11 Sep 2017 13:59:06 GMT

As Clever mentioned above, this is not possible.

Re: How can I do a binary load excluding the section access?

prieper — Mon, 11 Sep 2017 14:18:16 GMT

You may STORE all tables one-by-one as QVD *) and then reload these tables in an unrestricted application.

*) may be automated: FOR i = 0 TO NOOFTABLES() ....

Re: How can I do a binary load excluding the section access?

marcus_sommer — Mon, 11 Sep 2017 14:24:25 GMT

A binary load will always load the entire datamodel from the source-qvw but in general you could adjust the datamodel afterwards by loading further tables, modifying existing ones and also by dropping tables/fields.

I'm not absolutely sure if this includes also the section access table but you could try to drop the section access table after the binary-statement. Further if you disable the section access within the document properties in tab open the section access table although existing shouldn't be applied.

- Marcus

Re: How can I do a binary load excluding the section access?

Miguel_Angel_Baeyens — Mon, 11 Sep 2017 14:54:22 GMT

The thing with section access tables is that while they can have a name as any other table in the data model, they are handled separately and as such cannot be STOREd in any file after the binary load. Whatever is between Section Access; and Section Application; is considered a security table which cannot be referred in the data model as it would with any other table.

So if a binary load happens from a QVW with section access, this will be also loaded in the new document. As Marcus points below, it can be "disabled" in the Document Properties by unchecking Strict Exclusion, however the table will stay there.

Re: How can I do a binary load excluding the section access?

Miguel_Angel_Baeyens — Mon, 11 Sep 2017 14:57:43 GMT

As replied to Peter, it can be disabled by not using the Strict Exclusion, but the table as such cannot be dropped.

The cleanest way would be using a data model without section access which can be binary loaded if needed, or even two data models. Depending on the customer needs, I apply and binary load section access the closest possible to the data extraction (when security is of the essence and not even IT should be able to check some sensitive data, yet able to run tasks in the QMC, for example) or instead to the user interface (when security in the development team is looser and it only applies to users) as the last step of the reload chain.

Re: How can I do a binary load excluding the section access?

prieper — Mon, 11 Sep 2017 15:12:40 GMT

Dear Miguel,

I did not refer to the section-access-tables, but to the data-tables.

Understood that the OP want to re-use the current QV-report, which has some section-access included. A binary load to such report will alway inherit the restriction from the source.

The only way to bypass is to drop all data-tables as QVD and reload them in another report (without access-restrictions or different acess-restrictions).

Peter

Re: How can I do a binary load excluding the section access?

Miguel_Angel_Baeyens — Mon, 11 Sep 2017 15:30:16 GMT

You are completely correct, that's the way of doing it if removing SA from the binary loaded app is not possible.

Cheers!

Re: How can I do a binary load excluding the section access?

passionate — Mon, 11 Sep 2017 15:31:32 GMT

What Exactly are you trying to achieve because as per best practices section access is always at last layer.

Re: How can I do a binary load excluding the section access?

Peter_Cammaert — Mon, 11 Sep 2017 15:38:00 GMT

I agree with Miguel (partially it seems, since IT has always the possibility to access anything and everything).

Section Access is primarily intended for end-user security. That means that it is best only loaded as the very last step in any task chain. This problem with a Binary Load including Section Access is also an argument that you should avoid loading data sideways (e.g. from one end-user document into another). The better option in that case is to create a DataMart (or whatever you like to call a headless QVW document) without Section Access and let it act as data source for two end-user document in the next stage.