Section Access restricting all user

[Sebastian_Dec]

Hi, can someone help me and explain where I am doing wrong?
When granting access, I restrict access to ALL users, not just qlik2.

Values of ELSERVICE is only 0 and 1

"*" should return all results, but if something is constrained then the second condition should be constraint.
I used these materials:

https://help.qlik.com/en-US/sense/May2023/Subsystems/Hub/Content/Sense_Hub/Scripting/Security/manage...

My code looks like this:

Section Access;
Authorization:
LOAD * INLINE [
    ACCESS, 	USERID, 		CZYELSERVICE
    ADMIN, 		*,				*
    USER, 		*,				*
    USER,		qlik2,			1
];

[Or · Accepted solution]

In this scenario, the third line won't do anything. You've already given all authenticated users access to everything, which includes the user qlik2.

If you want to give specific permissions to some users, you'll have to remove the first two lines (and the second line is useless in itself, since you've already given everyone ADMIN access in the first line, so there's no need to also give them USER).

[Sebastian_Dec]

Thank you very much for your help, I understand something 🙂

I changed the code to this, but user sdec doesn't have all the values:

Section Access;
Authorization:
LOAD * INLINE [
    ACCESS, 	USERID,						CZYELSERVICE,
    USER, 		DOMAIN\SDEC,				*
    USER, 		DOMAIN\QLIK2,				1
];

I had to change to this:

Section Access;
Authorization:
LOAD * INLINE [
    ACCESS, 	USERID,						CZYELSERVICE,
    USER, 		DOMAIN\SDEC,				0
    USER, 		DOMAIN\SDEC,				1
    USER, 		DOMAIN\QLIK2,		  	    1
];

Is there any way to get every CZYELSERVICE value for a user?

Do you just need to repeat users and values?

[Or]

Using * should work (you may need to explicitly use Star is *; )

[Sebastian_Dec]

Star *  not working:

Section Access;
Authorization:
LOAD * INLINE [
    ACCESS, 	USERID,						CZYELSERVICE,
    USER, 		SCAWAR\SDEC,				*
    USER, 		SCAWAR\SCAWARQLIK2,			1
];

Apparently it doesn't work for the 0-1 range, but thank you for your help anyway.

[Anssi]

Hi, 

Star * consist values only listed in Section Access -table, so you have to list all CZYELSERVICE values which you want to include in *

Other way is to declare user SDEC access as ADMIN.

br,Anssi