Section Access: Row-Level-Reduction on multiple fields
Hi,
I am trying to implement section access with row-level reduction based on multiple fields.
We have to maintain 600+ users. We have a team assignment list in SharePoint (name, email, user-id, employee-id, role, team etc.)
The main fact table is call data.
The data reduction should be based on two fields: call_queue and team. For example:
User1: Role = Manager from Team 1 → can see data Team 1–Team 10 and Queue 1–Queue 11
User2: Role = Team Coordinator from Team 2 → can see Team 2 only and Queue 1–Queue 11
I want to know if it is possible to dynamically create data reduction based on the SharePoint list. At the moment each row in the SharePoint list corresponds to one employee and one team (no call queue).
Depending on the user’s role, they may have access to several teams and queues.
Also, the call_queue field is part of the Call fact table and is not in the team assignment SharePoint list.
Is there any good example using sharepoint list for dynamic row-level-security on multiple fields?
Yes, it is possible. There are two major things to keep in mind:
1 - Keep in mind Section Access reduces rows by a single column only, that means, if you need to reduce by multiple columns, you'll have to combine these columns into one.
2 - For each user, you must list every single combination of values that this user must has access too. So, if your USER1 access to Team 1 to 1o and Queue 1 to 11, you have to do something like this: USER1, TEAM1|QUEUE1 USER1, TEAM1|QUEUE2 USER1, TEAM1|QUEUE3 USER1, TEAM1|QUEUE.. USER1, TEAM1|QUEUE11 USER1, TEAM2|QUEUE1 USER1, TEAM2|QUEUE2 USER1, TEAM2|QUEUE3 USER1, TEAM2|QUEUE.. USER1, TEAM2|QUEUE11 ...
A common practice is to create a BridgeTable to link the Fact table and Section Access table. You'll have to combine all possible values and associate those to the Fact and User tables. This great article will probably answer all your questions: Basics for complex authorization - Qlik Community - 1465872
