Skip to main content
Announcements
Join us on Feb.12 to Discover what’s possible with embedded analytics: REGISTER TODAY
cancel
Showing results for 
Search instead for 
Did you mean: 
dafnis14
Specialist
Specialist

Data reduction doesn't work

Hi,

I created  a section access which is based on a file I prepared:

USERSPERMS.png

I have the following issues:

  1. If I don’t add the line ADMIN,*,*, I cannot open the app, eventhough In the QMC I'm defined as RootAdmin.
  2. Data is not reduced. The users see all product groups.

Here is the script:

Star = '*';

section access; 

UserPerms:

LOAD * inline [ 

ACCESS,USERID,PRODUCTGROUPID

ADMIN,*,*

ADMIN, INTERNAL\SA_SCHEDULER,*

]; 

Concatenate (UserPerms)

LOAD

ACCESS,

USERID,

PRODUCTGROUPID

FROM $(vPathFinalData)UsersPermissions.qvd]

(qvd);

section application; 

ItemGroup:

LOAD ItmsGrpCod,

ItemGroupName,

ItmsGrpCod as PRODUCTGROUPID

FROM

$(vPathFinalData)ItemGroup.qvd]

(qvd);

What am I doing wrong???

Thanks!

1 Solution

Accepted Solutions
petter
Partner - Champion III
Partner - Champion III

It is necessary for some organizations and businesses to even restrict what the RootAdmin is allowed to view of data. That's why a RootAdmin has to be given explicit DATA-access in SECTION ACCESS even though a RootAdmin has unrestricted access to all resources (except data) on a Qlik Sense site.

View solution in original post

7 Replies
petter
Partner - Champion III
Partner - Champion III

I don't know if that will solve you problem but the correct syntax for star is:

Star is *;

petter
Partner - Champion III
Partner - Champion III

Actually I think it IS your problem since the documentation says that if you don't specify  STAR IS '*';   then  STAR IS; is assumed meaning that star is not considered a wildcard:

https://help.qlik.com/en-US/sense/September2018/Subsystems/Hub/Content/Sense_Hub/Scripting/ScriptReg...

dafnis14
Specialist
Specialist
Author

Hi Petter,

I corrected as you suggested, Thanks!.

But why am I still getting the "access denied" message if I remove the line:

ADMIN,*,*

(I still didn't ask the users to try..)

petter
Partner - Champion III
Partner - Champion III

It is necessary for some organizations and businesses to even restrict what the RootAdmin is allowed to view of data. That's why a RootAdmin has to be given explicit DATA-access in SECTION ACCESS even though a RootAdmin has unrestricted access to all resources (except data) on a Qlik Sense site.

dafnis14
Specialist
Specialist
Author

Hi Petter,

After fixing the Star is, the user ZZZZ sees the data of user YYYY  as well.

I guess I'm still missing something  :-(..

dafnis14
Specialist
Specialist
Author

Thanks!

I'll open a new thread for my other issue..

dafnis14
Specialist
Specialist
Author

Hi petter-s

Would like your opinion about the behavior I described in my "correct answer":

Data reduction: user sees other user's data

Is the issue I described expected?

Thanks!