Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hello
I'm working on Qlik sense enterprise
I want to restrict developers from creating a folder data connection to a network path
I know this can be accomplished via security rules
I created a security rule as follows:
Resource Filter: DataConnection_*
Actions: Create
Conditions: resource.resourcetype = "DataConnection"
and
( (resource.type = "folder" and !(resource.Path like "*\\\\qliksenseprd\\QlikSense\\Technical STORE QVDs\\QDF_FIN*")))
however when I go to the load editor, the create-new-connection button at the top right is disabled as if the security rule failed
Hi @ali_hijazi , Are you planning to restrict the create connection option or only the folder creation ?
Hi @Kaushik2020
Yes mainly folder data connection creation
Regards,
.
I don't want to restrict reading the folder data connection
I want to allow developers to create a folder data connection except for the specified location
Please read my question fully before throwing hap-hazard answers
you can modify the security rule to add your conditions. In our environment we have defined on who can create a folder in folder lever security. Not from Qlik Sense.
Hello @Kaushik2020
in the company we have several Teams of developers
let's say Team1 and Team2
both teams are allowed to create any folder connection. However members of Team2 are not allowed to create a folder data connection to
\\server_name\QlikSense\Technical STORE QVDs\QDF_FIN
In my case, I have restricted it via the folder security inside the Server user group. I hope same should be possible with QMC Security rules.
the thing is that the process behind the script is executed by the user account that runs the Qlik Sense engine. So even if you restrict users from accessing the folder via windows, the developer can still create a connection to that folder and even run the script successfully because it is ran by that service account.
The account which is used to login to Qlik Sense should be configured. When we reload the Qlik Sense user id is recognized in the server.