Access denied with Section Access

[Federicofkt]

Hi, I'm new to Section Access and I have some problem. That's my code:

Section Access;
LOAD * inline [
ACCESS, USER.EMAIL
ADMIN, mail@mail.com
USER, mail2@mail.com
]
;
Section Application;

where the ADMIN user it's me and the email is 100% correct. The problem is that when I reload the app, it says that I have access denied after the reload. I don't understand what I'm doing wrong here.

Update: 

I've added the REDUCTION column (as written in the documentation) with the variable on which I wanted to filter the accesses, like so:

Section Access;
LOAD * inline [
ACCESS, USER.EMAIL, KEY_AREAMANAGER
ADMIN, mymail@mail.com, *
USER, mail2@mail.com, X
]
;

with the purpose of letting me see everything and USER see only data related to variable X.

Since then, the disaster: the script gave an "unknown error" after the reload and now neither I and the other user can access the app.

How do we solve this? We are both admin and owner of the space and the app, how is it possible that we cannot access? Did we just lost everything?

[BrunPierre]

Using a domain name or group name necessitates the use of NTNAME.

Section Access;
LOAD * inline [
ACCESS, NTNAME
ADMIN, mail@mail.com
USER, mail2@mail.com
]
;
Section Application;

[Lech_Miszkiewicz]

Hi @Federicofkt 

What are we talking about here?

Is it:

• QlikVIew?
• Qlik Sense Enterprise on Windows (QSEoW On Premise)?
• Qlik Sense SaaS?

Indeed if you are using QlikView you may need to use NTNAME as @BrunPierre suggests, if it is QSEoW then you may need to use USERID etc. 

Make sure you use UPPER CASE for your user email.

https://help.qlik.com/en-US/cloud-services/Subsystems/Hub/Content/Sense_Hub/Scripting/Security/manag...

[Federicofkt]

Qlik CLoud, so Qlik Sense Saas.

The think is that now I've added the REDUCTION column (as written in the documentation) with the variable on which I wanted to filter the accesses. I've tried with my user and another one, the script gave an "unknown error" after the reload and now neither I and the other user can access the app.

What's going on here?

[henrikalmen]

What do you mean by "can not access the app"? Are you saying that no admin can open the app's script for editing and therefore you can not make changes to the section access part of the script?

[Federicofkt]

I mean that when someone tries to open the app, this message appears:



That in english means Error, Access denied, and the details there is code error 5.

So yes, it seems like that nobody can access the script in order to make changes in the access part of it

[henrikalmen]

Does that happen to all admins as well, not just regular users? Do you have some kind of service account included in the section access that you could use to access the app?

[Federicofkt]

Both me and the other colleague of mine have admin acces, and we can't access the app.

I've actually solved by exporting it and then reimporting, somehow I'm able to open the imported one. But still I don't understand what happened in the original app.

[Lech_Miszkiewicz]

Use „open without data”, update your script, and make sure everything in section access is in UPPER CASE!!!

[Federicofkt]

So the email addresses as well?