Sense Section Access

[Anonymous]

I don’t understand how to solved this case in Sense 1.1 with Section Access.

The case is:
I have one user called USA and this user must only se data where COUNTRY_CODE is US.
Then I have a group of users called BI-ADMIN. Members of BI-ADMIN should not have any restrictions.
In my app, I have 10 unique values of COUNTRY_CODE.
USA is a user and BI-ADMIN is a Group in Active directory.

When I try the script below, members of BI-ADMIN can only see data where COUNTRY_CODE is US. So the script remove the nine other countries. That is not what I want.
Can anyone see why?

SECTION ACCESS;
LOAD * INLINE [
    ACCESS, NTNAME,   REDUCTION 
    USER, DOMAIN\BI-ADMIN,  
    USER, DOMAIN \USA, 1   
];

SECTION APPLICATION;
LOAD * INLINE [
    REDUCTION,  COUNTRY_CODE
    1  US
];

[#2]

Because your Section table don't have other Country entries. Did u enabled Strict Exclusion ?

[hic · Accepted solution]

In Qlik Sense, you cannot disable "Strict Exclusion". It is always on.

This means that you cannot use blank as notation for <ALL DATA>. Instead you must list it explicitly. For example, this way:

AllReductions:
Load
Concat(distinct Upper(Reduction), ',') as AllReductions
Resident TableWithReductions;
Let vAllReductions = Peek('AllReductions',-1, 'AllReductions');
Drop Table AllReductions;

Section Access;
Authorization:
load ACCESS, NTNAME, Subfield(REDUCTION,',') as REDUCTION Inline
[ACCESS, NTNAME, REDUCTION
USER, DOMAIN\BI-ADMIN, "$(vAllReductions)"
USER, DOMAIN\USA, 1 ];

HIC

[Anonymous]

Thanks