Forbid to write in Data Connection

[denisb]

Hi, 

I have created some Data Connections to folders with QVD files. I want, that the user can use the QVDs to make analyses (Self Service). 

But I also want, that the user cannot do any "store" in this Data Connection. I am afraid that data will be overwritten.  

Does anyone have any ideas?

Thanks

[ArnadoSandoval]

Hi @denisb 

One option is using Active Directory in your Windows OS, using AD-Groups to grant read-only permissions to a particular group of users, obviously, the account creating the QVDs will have full access to all the objects in the folder.

Hope this helps,

[denisb]

Hi @ArnadoSandoval, 

thanks for your reply. 

We are using AD-Groups. 

But: I created a security rule: The users can read the Data Connection. This ensures only, that the user can use this connection in script (he cannot change the Data Connection itself). When the user Reloads the script (including a "store" or not), Qlik Sense uses the access right from the QS-Service-Account for the folder. And the service account has full access to our folders. 

[ArnadoSandoval]

Hi @denisb 

I am talking about implementing folder level security on the Windows folder as shown below, it works for me. Unfortunately, I do not have access to a windows server to properly document the procedure step by step.

hth

[denisb]

Hi @ArnadoSandoval , 

this works for QlikView, but not for QlikSense. 

In QlikSense, when a user reloads the script with any dataconnection, QlikSense will not use the users AD-Account to access the folder. QlikSense uses it's service account. 

[ArnadoSandoval]

Hi @denisb 

All depends on you configuration, and the security rules assignments, unfortunately I do not have access to a QS Server to illustrate the procedure.

[denisb]

So, I created a new user, which has only read access to my folder. 

I use this user for my Data Connection:

But, my users can still do this:

When the Data Connection is using user "TestQSuser", this should not be possible. 

It doesn´t matter what User and Password I type into "User ID" and "Password". It seems that Qlik Sense ignores that. 

[ArnadoSandoval]

Hi @denisb 

Unfortunately, I do not access to a Qlik Sense Enterprise server folders structure, so I can't test or direct you on how to do this, I will give a try on my local environment, which is a Windows 10 laptop, I am not optimistic that I could replicate the procedure, but I will give it a try.

hth