Security Rule Example: "Sharing of Bookmarks"

[Andre_Sostizzo]

In this scenario, the administrator wants to grant access an ability for users to see other user's bookmarks.

Environment:

Qlik Sense Enterprise on Windows 

Resolution:

Note: Debugging and writing custom security rules cannot be carried out by Qlik Support directly. No Support or maintenance is implied or provided. Further customization is expected to be necessary and it is the responsibility of the end administrator to test and implement an appropriate rule for their specific use case. The example provided below is provided as is, and we suggest joining our Qlik Community for access to more best practices and solutions. For direct implementation advice, our Consulting Service and Pre-Sales are available to assist. 

• Name_BookmarkSharing
• Description: This rule will allow a limit amount of sharing of bookmarks
• Filters:App*
• Actions: Read

-- Every bookmark on an app which they have read access; very permissive use case
Conditions: ((user.name="Eric Hanson") and (resource.objectType="bookmark"))
-- Every bookmark which has been created by a named user; allows developer / admin control over whose bookmarks are shared for a more locked down experience
Conditions: ((user.name="Eric Hanson") and (resource.objectType="bookmark" and resource.owner.userId="ltu"))
-- Every bookmark which has been created on a named app
Conditions: ((user.name="Eric Hanson") and (resource.objectType="bookmark" and resource.app.name="Travel Expense Management"))
-- Every bookmark which has a specified string in it; use case allowing users to name their bookmarks with a string to flag them as shareable.
Conditions: ((user.name="Eric Hanson") and (resource.objectType="bookmark" and resource.name like "*Blah*"))

In these examples, we am hard coding a user name as the user selection criterion but you should be able to further customize that to say user.group, user.directory, etc.
 
The other consideration is that bookmarks in Sense apply to a specific sheet.

This means that the user will need to have permission on the underlying sheet which the selections are applied to. There’s not going to be a programmatic way that will grant users read access to the sheet based on their read access on a bookmark. So one would want to be careful with a broad ungoverned / untrained security rule for sharing bookmarks.

Related Content:

Collection of Specific Rule Scenarios and Customization of Qlik Sense Security rules