Qlik Sense: Script and files being removed when using ODAG & Dynamic views

[Patricia_Silva]

In Qlik Cloud new apps generated repeatedly from the ODAG template app  do not contain any access to the script and attached files unless the user is the link owner.

In a client-managed environment, the same applies when the user generating the ODAG/Dynamic View doesn't own the template app.

Environment

Qlik Sense Enterprise on Windows 
Qlik Cloud 

 

Resolution/Workaround

This is working as intended in Qlik Cloud. The decision was reached to ensure data and file security across the platform. 

Qlik Sense Enterprise on Windows Client-managed provides a workaround, which was introduced in the August 2021 release.

The workaround requires the modification of a .json file:

1. Go to the ODAG service folder, for instance:
   

   C:\Program Files\Qlik\Sense\OdagService\dist​​

2. Open defaults.json in a text editor and add IsKeepScriptAndFilesEnabled: true to the file. It should end up something like so:
   

   {
       "IsKeepScriptAndFilesEnabled": true
   }

NOTE

• The configuration would need to be re-enabled after an upgrade/reinstall of sense.
• The configuration applies to all ODAG/DV apps generated without exception.
• The configuration may need to be set on all nodes in a multinode environment.
• Services may need to be restarted for the change to take effect.

Internal Investigation ID(s):

• GEO-1767
• QB-669
• 00063335

[sirpod90]

Is there a workaround for Qlik SaaS as well?

[Sonja_Bauernfeind]

Hello @sirpod90 

Let me look into this for you!

All the best,
Sonja 

[Sonja_Bauernfeind]

Hello @sirpod90 

Our investigations have converged it seems: You've received additional information from a colleague of mine and I have updated the article to reflect our answer.

All the best,
Sonja 

[sirpod90]

Hello @Sonja_Bauernfeind 

I now heard multiple times "it works as intended"

But I don't get the intention.

What is the point in seeing the data, but not seeing where the data is coming from?

There is only one exception for your security concerns:If any user runs the ODAG script, but the script is executed in the background by the original owner of the ODAG app. -> This means that editing the script makes it possible to have the script executed by another user.

But this is mostly not the case when working with ODAG.

ODAG is designed for big data and not for sensitive data (access to sections).

So if you prepare a data model and some standard or template scripts to navigate through a set of data, users can simply use a predefined data model and script and edit the specific parts for their needs.

In my case, the user has all the rights to edit, use and consume the data in the space.

So they are allowed to copy the ODAG master and template apps. They can run all the code and use the dedicated data connections, but there is still no script available for them, when running my ODAG app.

Furthermore, ODAG generated apps cannot use new features of the SaaS version, such as alerting or monitoring in the Hub, because automatic reloads are not possible, unless the owner of the master and template apps has created his own generated apps! Is that working as intended?

To be honest, if you don't change this feature in the SaaS version, there is no working big data concept yet for your SaaS version for me.

But I am happy to have a discussion about it.

Regards

Tobias

[Sonja_Bauernfeind]

Hello @sirpod90 

Thank you for the in-depth reply. I fully understand where your request is coming from and believe that the next step here would be to log an Idea in our Ideation section. This is the expected method to provide feedback to our Product Team. 

Please formulate your idea there and ping me in your reply so that I can a) give it a vote and b) forward it to your Account Manager to see if we can facilitate dialogue. 

All the best,
Sonja