topic Re: Section Access in QlikView

Section Access

Tue, 21 Jul 2015 13:32:00 GMT

Hi,

i am new to Qlikview and trying to implement section access, i want to restrict data by Division(Field DIV) in my document. i have created NT section access, looks like its working but i noticed some data missing when i open the document from Access point. i was able to see that data if i open the document in personal edition. can someone please let me know if i'm doing something wrong in here.

Section Access;

LOAD * INLINE [

ACCESS, NTNAME , DIV

ADMIN, PANTHER\HARISHB, NE

ADMIN, PANTHER\HARISHB, SE

ADMIN, PANTHER\HARISHB, W

ADMIN, PANTHER\BENHAN, NE

ADMIN, PANTHER\JOEMAN, NE

ADMIN, PANTHER\QLIK00.SERVICE, *

USER, PANTHER\JIMMYK, NE

];

Section Application;

SalesmanDimension:

LOAD

DIV

FROM

$(vPath)SalesmanDimension.qvd

(qvd);

Below is the actual table that has DIV field.

SalesmanDimension:

LOAD

ACCT_NO AS SalesCode,

FIRST,

LAST,

Name,

MI,

DIV,

Email,

REGION_MGR,

UserName,

ACCT_NO & ' - ' & Name AS SalesName

FROM

$(vPath)SalesmanDimension.qvd

(qvd);

Re: Section Access

awhitfield — Tue, 21 Jul 2015 13:42:34 GMT

Hi Harry,

you need to add the QV SERVICE account to you list of users

Andy

Re: Section Access

Kushal_Chawda — Tue, 21 Jul 2015 13:43:12 GMT

From which user you logged on?

Re: Section Access

awhitfield — Tue, 21 Jul 2015 13:46:42 GMT

Actually, just spotted ADMIN, PANTHER\QLIK00.SERVICE, which I presume IS the service account, remove the * (this means 'all listed' NOT all) and then reload.

Andy

Re: Section Access

Tue, 21 Jul 2015 13:46:54 GMT

Thanks, Andrew! service account will not be in SalesmanDimension(Where i'm getting the DIV). Do i need to create one more user table and assign Divisions?

Re: Section Access

jfkinspari — Tue, 21 Jul 2015 13:48:01 GMT

Note that the * in the Section Access script

Section Access;

LOAD * INLINE [

ACCESS, NTNAME , DIV

ADMIN, PANTHER\HARISHB, NE

ADMIN, PANTHER\HARISHB, SE

ADMIN, PANTHER\HARISHB, W

ADMIN, PANTHER\BENHAN, NE

ADMIN, PANTHER\JOEMAN, NE

ADMIN, PANTHER\QLIK00.SERVICE, *

USER, PANTHER\JIMMYK, NE

];

Does not mean all data, but more all listed values (NE, SE, W).

In case that's all the data you see, you are probably opening the document using the service user, or the document has been reloaded using the service user

Re: Section Access

Tue, 21 Jul 2015 13:50:02 GMT

i'm reloading this from server, Service account is used when i'm doing on server. i'm opening the document as HARISHB from Access point.

Re: Section Access

Tue, 21 Jul 2015 13:54:57 GMT

Yes, that is the service account. you want me to keep the DIV blank for QLIK00.SERVICE user?

Re: Section Access

jfkinspari — Tue, 21 Jul 2015 13:58:44 GMT

I'm not completely sure, but if you remove the value, and Strict Exclusion is activated, I don't think you'll have access to the document at all

Re: Section Access

Kushal_Chawda — Tue, 21 Jul 2015 14:06:51 GMT

So are you able to see NE, SE and W for this user? or what is visible?

Re: Section Access

awhitfield — Tue, 21 Jul 2015 14:17:58 GMT

Yes, the service account needs to have access to all divisions else they won't load.

Andy

Re: Section Access

Tue, 21 Jul 2015 14:21:01 GMT

Yes i was able to see only NE,SE and W when i log in as HARISHB, the only problem is i'm missing data for Rev Budget in Ground vs Budget chart

Re: Section Access

Anonymous — Tue, 21 Jul 2015 15:06:22 GMT

Same Situation happened to me as well. In your Division field from your data model has data like ( East , West , North , South) and in your AUTH sheet or Inline table you have enabled only 3 divisions for the users or Admins like (East, West, North).. Even though you mention * for some of the users you will still miss the data for the South after saving the qlikview document.

Example of above scenario,

LOAD * INLINE [

ACCESS, NTNAME , DIV

ADMIN, PANTHER\HARISHB, East

ADMIN, PANTHER\HARISHB, West

ADMIN, PANTHER\HARISHB, North

ADMIN, PANTHER\BENHAN, East

ADMIN, PANTHER\JOEMAN, North

ADMIN, PANTHER\QLIK00.SERVICE, *

USER, PANTHER\JIMMYK, West

];

Division:

LOAD * INLINE [

DIV

East,

West,

North,

South

];

--------- in this above scenario you will still miss South Division data for the ADMIN QLIK00.SERVICE even though he has *

This is normal behavoiour of qlikview.. And to over come this issue for ADMIN QLIK00.SERVICE for division give blank space. then that user can see all the data.And make sure strict exclusion is removed when setting up field level or row level security.

Let me know if this helps or i can provide an example with the script

Re: Section Access

Tue, 21 Jul 2015 15:35:09 GMT

Hi Vinay,

Thanks for the reply! if you see the attachments, the fist one is taken from the Accesspoint and the second one from desktop version. the desktop one is showing all the data but the accesspoint is missing just for one chart "GroundActual Vs Budget" and the fields are Rev Budget and GP$ Budget. it did the same even i load the data making

QLIK00.SERVICE as blank. i have added all the possible values to the QLIK00.SERVICE account and HARISB still no luck.

Section Access;

LOAD * INLINE [

ACCESS, NTNAME , DIV

ADMIN, PANTHER\HARISHB, NE

ADMIN, PANTHER\HARISHB, SE

ADMIN, PANTHER\HARISHB, W

ADMIN, PANTHER\HARISHB, C

ADMIN, PANTHER\HARISHB, CS

ADMIN, PANTHER\HARISHB, ES

ADMIN, PANTHER\HARISHB, M

ADMIN, PANTHER\BENHAN, NE

ADMIN, PANTHER\JOEMAN, NE

ADMIN, PANTHER\QLIK00.SERVICE, NE

ADMIN, PANTHER\QLIK00.SERVICE, SE

ADMIN, PANTHER\QLIK00.SERVICE, W

ADMIN, PANTHER\QLIK00.SERVICE, C

ADMIN, PANTHER\QLIK00.SERVICE, CS

ADMIN, PANTHER\QLIK00.SERVICE, ES

ADMIN, PANTHER\QLIK00.SERVICE, M

USER, PANTHER\JIMMYK, NE

USER, PANTHER\JESSEB, SE

USER, PANTHER\MIKEL, C

];

Section Application;

SalesmanDimension:

LOAD

DIV

FROM

$(vPath)SalesmanDimension.qvd

(qvd);

Re: Section Access

Anonymous — Tue, 21 Jul 2015 15:41:14 GMT

That is strange, Did you set up any expression or object level security.

Re: Section Access

Anonymous — Tue, 21 Jul 2015 15:42:31 GMT

Quick question does HarrisB needs access to all the data. if that is the case we have to put him blank as well.

Re: Section Access

Tue, 21 Jul 2015 15:50:58 GMT

No, i don't have any expression or object level security! i have added all the possible values to QLIK00.SERVICE and HARISHB.

Re: Section Access

Anonymous — Tue, 21 Jul 2015 15:53:06 GMT

when you have added does it help Harry.

Re: Section Access

Tue, 21 Jul 2015 16:06:31 GMT

Unfortunately it didn't! i think i'm missing some logic here. below is the actual data model where section access table is linking to salesman dimension.

Re: Section Access

Anonymous — Tue, 21 Jul 2015 17:54:03 GMT

in this log hanging table with only Division in it. Does it have all the data or is it missing anything