Use custom property of data connection for managing app access via security rule

[asdfkj234598u]

Hi,

we are looking for a way to improve the way we grant access to certain datasets via QLik. At the moment we are managing access to Streams based on custom properties of users.

We are looking for a way to control the access to an app inside these streams based on the data connections that are used in the app. We would like to define a custom property for data connections (e.g. 'data_category=super secret data') and use this information when deciding  if a user should get access to a certain app. 

The security rule would have to evaluate if the app uses a data connection with the custom property set an decide based on the value of data_category if the user should get access.

We want to prevent content admins from publishing apps to the wrong stream accidentally and thus breaking data security.

Is this possible? Are we thinking to complicated? Is there a better way?

[ajaykakkar93]

Hi,

I understand your concern, you do have the below requirements,

A platform that can be used to provide access to users & can maintain that access as per users for data connections.

I think it can be done via a custom-created UI that will handle & maintain & only some Admins would have access to actually use this UI/portal to provide./approve access.

This is a good use case for me, one day ill like to create this scenario & solve this.

Conclusion & steps to actually do this
NOTE: This is my view & my thought process ill try to solve as much as I can & cover all aspects that I can for now.

• I'll create a MASHUP in qlik sense that will first list all the data regarding data connection access for all; the users that can be found in the AUDIT tab in QMC
• Then I'll flag & try to connect the dots, i.e. I'll get the custom property for each user listed & check as per group
• I'll get the Last modified date for the user that will indicate when it was last modified

Connect the above statements & summarize 

• Get All User List & custom property
• Get a List of users with respect to Data Connection
• Last modified date from user list will help to indicate when custom property was added for that specific user
• Link all the above in to a single workflow that will help to solve this p[roblem

It is a complicated task that will need experience in playing with QLIK API's & advance knowledge of the usecase