topic Re: Using Section Access With LDAP in QlikView

Using Section Access With LDAP

gireesh1216 — Wed, 25 Nov 2020 16:16:04 GMT

Hi Friends,

In my qlikview application, I have 3 sheets (Home,sheet1, sheet2).

And have text 3 objects with action to navigate between the sheets.

Access requirement is as follows:

Home - all LDAP_GROUP1 and LDAP_GROUP2

sheet1 - only LDAP_GROUP1

sheet2 - only LDAP_GROUP2

LDAP_GROUP1- users	LDAP_GROUP2-users
1216	1216
1217	1220
1219	1221

How can we write section access code to get this restrictions for LDAP groups.

Thanks

Gireesh

Re: Using Section Access With LDAP

Anil_Babu_Samineni — Thu, 20 Jul 2017 05:53:40 GMT

May be

Sheet Level Security.qvw

Sheet level access

Re: Using Section Access With LDAP

gireesh1216 — Thu, 20 Jul 2017 06:16:27 GMT

Thanks For Ur Reply

But My question is "restrictions for LDAP groups"

LDAP groups already created and available in QMC Distibution service.

we want security based on LDAP groups.

Re: Using Section Access With LDAP

Anil_Babu_Samineni — Thu, 20 Jul 2017 06:36:44 GMT

I am not much expertise in Server AON. may be marcus_sommer‌ pcammaert

Re: Using Section Access With LDAP

marcus_sommer — Thu, 20 Jul 2017 06:47:41 GMT

I think it should work if you just specify the groups by NTNAME, like:

section access;

Access:

load * inline [

ACCESS, NTNAME

ADMIN, ADMINUSER

USER, LDAP_GROUP1

...

- Marcus

Re: Using Section Access With LDAP

gireesh1216 — Thu, 20 Jul 2017 09:52:33 GMT

Thanks Marcus Sommer,

The above script working fine in my local system.

But not working in access point if "strict exclusion" is checked in document. Getting following error while opening dashbaord.

Error: Failed to open document. You don't have access to this documnet.

If "strict exclusion" is unchecked, the restictions are not applied in the dashboard and showing all data.

-Gireesh

Re: Using Section Access With LDAP

marcus_sommer — Thu, 20 Jul 2017 10:21:40 GMT

This meant that something isn't correct with your section access implementation and in the end strict exclusion is mandatory because otherwise it's just a kind of usability and not really secure.

I have never implemented section access on sheet/object-level else only to data. Therefore I suggest that you used some small dummy-application and building and extending the section access step by step whereby I would leave out at first the object-level and just restrict some data.

Quite important is to check how the user is authenticated - just osuser() within a textbox will do it - and to give attention to such things like not to load the section access optimized from a qvd and to put all the values in upper() and similar. Here you will find various links to quite useful resources: Section Access.

- Marcus