topic Re: Access Control in QlikView

Access Control

pooja_sn — Wed, 25 Nov 2020 16:16:04 GMT

I need to implement Aunthorization in qlikview.

Our data contains few Regions and Businesses under each Region. User access should be restricted to limited Region and Businesses.

Eg. User ABC should be able to access LONDON,NEWYORK Region and Retails and Finance Business under these two regions.

I am willing to use OSUSer() as logged in user as our application will be accessed using browser.

How this can be achieved?

Re: Access Control

MK_QSL — Wed, 04 May 2016 10:35:02 GMT

Use Section Access in your Application.

QlikView Section Access Examples

Introduction to Section Access

Data Reduction Using Multiple Fields

Re: Access Control

awhitfield — Wed, 04 May 2016 10:37:34 GMT

Hi Pooja,

sounds like you need to implement SECTION ACCESS within you QVW. Check out the following to get you started in the right direction:

https://community.qlik.com/docs/DOC-1853

HTH

Andy

Re: Access Control

florentina_doga — Wed, 04 May 2016 10:39:41 GMT

use section acces like this

facturi:

LOAD agent as AGENT,

regiune as REGIUNE,

valoare

FROM

source;

Section Access;

LOAD * INLINE [

ACCESS, USERID, PASSWORD, AGENT, REGIUNE

admin,admin,admin1,*,*

USER, user1, user11, 'A1',*

USER, user7, user71, 'A1','B2'

USER, user2, user21, 'A2','B3'

USER, user3, user31, 'A3','B1'

USER, user4, user41, 'A4','B2'

USER, user5, user51, 'A5','B3'

USER, user6, user61, 'A6','B1'

];

Section Application;

Re: Access Control

pooja_sn — Wed, 04 May 2016 14:35:16 GMT

Hi Florentina,

As users will be accessing this application using browsers , a prompt is already displayed which takes domain id and password as login Credentials.

Is there any way to use same credentials for access control?

Re: Access Control

krishnacbe — Wed, 04 May 2016 14:37:42 GMT

Hi Pooja,

You can use the NTNAME instead of USERID. so that user don't want to enter the credentials again.

Re: Access Control

pooja_sn — Thu, 05 May 2016 07:40:06 GMT

I tried below script which isn't working. According to Access rights specified below Is hould get Access to Division '01' only ,but I am able to see all data. Any suggestions?

SECTION ACCESS;
LOAD * INLINE [
ACCESS, NTNAME, DIVISIONID
USER, MYDOMAIN\MYUSERNAME, 01

];

SECTION APPLICATION;
[Division Table]:
LOAD * INLINE [
DIVISIONID, description
01, bird-
02, food
];

Re: Access Control

avinashelite — Thu, 05 May 2016 07:46:18 GMT

Have to checked the Initial data reduction option ???

Go to Document properties > Opening > check > Initial data reduction on opening option

and

make sure both the section application and section access columns should be in caps

Re: Access Control

pooja_sn — Thu, 05 May 2016 07:57:55 GMT

Yes. that worked . Thanks

Re: Access Control

avinashelite — Thu, 05 May 2016 08:05:27 GMT

cool, if you have got the answer please mark the correct answer and close this thread

Re: Access Control

pooja_sn — Thu, 05 May 2016 08:17:18 GMT

A small query..
It doesn't work if I write 'USER' under ACCESS but it works fine for 'ADMIN". Why is that so?

Re: Access Control

avinashelite — Thu, 05 May 2016 09:34:03 GMT

could you please explain me whats not working ...data reduction ??

Re: Access Control

pooja_sn — Thu, 05 May 2016 09:48:43 GMT

Yes.

If I use below script I get can see data related to Division 02 but not 01.

SECTION ACCESS;
LOAD * INLINE [
ACCESS, NTNAME, DIVISIONID
USER, MYDOMAIN\MYUSERNAME, 01

ADMIN, MYDOMAIN\MYUSERNAME, 02

];

Re: Access Control

avinashelite — Thu, 05 May 2016 10:08:44 GMT

Since your assigning USER and ADMIN access to same user its not able to validate it properly ...try like this

this should work

SECTION ACCESS;
LOAD * INLINE [
ACCESS, NTNAME, DIVISIONID
ADMIN, MYDOMAIN\MYUSERNAME, 01

USER, MYDOMAIN\MYUSERNAME, 02

];

Access Control

Re: Access Control

avinashelite — Thu, 05 May 2016 10:31:04 GMT

Did you tried my solution ?? still facing issue

Re: Access Control

pooja_sn — Thu, 05 May 2016 11:02:40 GMT

Yes. I believe assigning ADMIN and USER both accesses to same user is causing this issue.

If I assign only one of these to user ,it works fine.

Re: Access Control

pooja_sn — Thu, 05 May 2016 11:08:44 GMT

yes. your script also gives access to divisions pertaining to ADMIN access.

Re: Access Control

avinashelite — Thu, 05 May 2016 12:12:19 GMT

its working for me ....strange ...share the complete script

Re: Access Control

pooja_sn — Thu, 05 May 2016 12:16:32 GMT

SECTION ACCESS;
LOAD * INLINE [
ACCESS, NTNAME, DIVISIONID
ADMIN, domain\UserName,01
USER,domain\UserName,02
];

SECTION APPLICATION;

LOAD * INLINE [
DIVISIONID, description
01, bird-
02, food
];

Re: Access Control

avinashelite — Thu, 05 May 2016 12:34:15 GMT

could you please change all the data to upper case and then try ??