Qlik Sense - My Sheets - All users can see all user personal created sheets, how to hide?

[jitender52]

Hi All,

we have upgraded the Qlik sense server from 2022 to May 2024 last week ,
after the upgrade , All users can see other users created unpublished sheets also in their hub in all the streams,.

How to to hide them or any security rules I need to change/Update , Please help .

Attached screenshot I can see other user sheet .Attached for reference

Qlik Sense Business #qlik Sense #qmc 

Thanks in advance

Jitender Singh

[jitender52]

Hi All,

we have upgraded the Qlik sense server from 2022 to May 2024 last week ,
after the upgrade , All users can see other users created unpublished sheets also in their hub in all the streams,.

How to to hide them or any security rules I need to change/Update , Please help .

Attached screenshot I can see other user sheet .Attached for reference

Qlik Sense Business Qlik Insight Advisor Qlik Sense Enterprise on Windows 

Thanks in advance

Jitender Singh

[morgankejerhag]

You have some security rule that opens up things. Look at the audit function to see which rule affects the sheets. https://help.qlik.com/en-US/sense-admin/November2024/Subsystems/DeployAdministerQSE/Content/Sense_De...

[henrikalmen]

That shouldn't have happened, but there should be something in your security rules that causes this problem - either a default security rules that is now missing, or a new custom security rules that an admin has implemented in an incorrect way.

For QSeOW you can audit security rules in QMC. Choose "Audit" in the menu. In "target resource" you select "App objects" and to make things easier you press the magnifying glass icon and in the popup you filter out for example the sheet that you show in your example. Press the "audit" button and now you can see everyone who has access. Select one of the users that should not have access, and at the bottom of the screen you press "Associated rules". Now hopefully you can see the security rule(s) that makes it possible for the wrong user to see the sheet. And then you should be able to figure out what the problem is.

These are the default security rules for Qlik Sense Enterprise on Windows (the on-prem qlik sense): https://help.qlik.com/en-US/sense-admin/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdministe... 

[jitender52]

Hi Henrikalmen,

Thanks for your reply but I was not able to figure out the exact rule change or any condition which we can add  , Could you please  help me in that it would be great, Added a screenshot for your reference of existing rules.

thanks in advance.

[jitender52]

Hi Morgen,

Thanks for your reply but I was not able to figure out the exact rule change or any condition which we can add , Could you please  help me in that it would be great, Added a screenshot for your reference of existing rules for the User created sheet object which I Can see in published app also.

thanks in advance.

[henrikalmen]

It's impossible to say based on that screenshot. We can't see the actual rules,only the name and description. I do note that one of the associated rules are for RootAdmin. Everyone is not rootadmin, are they? Also: there is a possibility that someone altered the root admin rule so that it applies to everything including your problem, but not even rootadmin should have that right.

[jitender52]

I have root admin access and I have added screenshot containing rules associated to me , But root admin also should not see the unpublished sheet. 

[henrikalmen]

It is possible that "Relationship Manager - AppObject" is your problem, it seems to grant all users that match the condition read access to everything related to app objects (sheets, bookmarks, and more). Try to disable it and see if you still have the same problem.

[jitender52]

Hi ,

I tried disabling the mentioned rule by you but  still able to see the unpublished sheets by other users.