Security Rule to allow users to see only their Bookmarks in published App

[Aditya_Chitale]

Hello All,

The subject explains itself. How to create security rule to restrict user to see only his bookmark in an app ?

We have currently migrated and published Qlik Sense Apps from old to new environment and all the private bookmarks have been automatically published. But the issue is that I don't have any control in new environment to see whether the user is able to see all bookmarks or only his/her created bookmark from old environment.

So I want to eliminate this risk by creating security rule but I am fairly new to creating security rules. Any help on this would be highly appreciated.

Regards,

Aditya

[rzenere_avvale]

Hey there @Aditya_Chitale ,
May I ask you if the old environment is still available and if you expect to have all bookmarks published?
Moving from one environment to another does not imply publishing all the personal bookmarks, so if from the business side it's ok to have the personal bookmarks in their own area I would suggest to depublish these objects.

Regards,
Riccardo

[Aditya_Chitale]

@rzenere_avvale ,

I can unpublish the bookmarks but will the users be able to see only their bookmark after logging in the app ?. I have admin access so I can see all bookmarks but can't say anything from a user standpoint. I have concern regarding that.

Regards,

Aditya

[rzenere_avvale]

Depends on how the migration has been done:

• if the owner of the bookmark is still the "original user", then unpublishing the bookmark will be enough
• if the owner of the bookmark is another user (like the owner of the application), then you need to first update the owner of the bookmark and then unpublish it

Regards,
Riccardo

[Aditya_Chitale]

@rzenere_avvale thanks for the quick reply. but I am facing a problem where I am not able to see who's the owner of respective bookmarks. Can you help me in figuring it out ?

Same Details for other bookmarks as well. Owner is nowhere mentioned.

Regards,

Aditya

[rzenere_avvale · Accepted solution]

You have many ways to retrieve this information:

• if you have access to the monitor_apps_REST_appobject data connection, you should be able to create an app that (using that data connection) retrieves the required information using the APIs
• if you have direct access to the postgreSQL database, you should be able to query the appsobject table
• if you are familiar with PowerShell, you could use the Qlik-Cli-Windows or Qlik-Cli (with Qlik Sense Enterprise client-managed)

In case you need to update the owners, I would suggest getting familiar with the second or third options (for the activity you'll need to use one of these solutions).

Riccardo

[kevincase]

If you are running the Operation Monitor monitoring application and have access, you can use this to see the owner of bookmarks.  On the Apps sheet in the application, apply filters to get the bookmarks for the application in question.  You will then see the owner for each bookmark and weather they are published or not.  Be aware that published bookmarks are available to all users that have access to the application.

The rule should be something like this.

Hope this helps.

Kevin .....

[Aditya_Chitale]

Thanks @kevincase , I found what I was looking for using your solution but problem is that owner of all bookmarks is showing as my id. So I guess all users will see all bookmarks which I don't want.

Is there any way to change owners of bookmarks dynamically as per our old environment ? using Pgadmin or any other method ?

@rzenere_avvale any suggestion from your side ?

Regards,

Aditya

[kevincase · Accepted solution]

Aditya,

If you have access the the posgres database via pgadmin, I believe you could update the owner.  I no longer have access to the database in my current environment  but I believe that the bookmarks are in a table names appobjects.  They shouldb't be too hard to find.  If you want them to also be private, you will need to update them to 'Not approved' and 'Not published'.

Sorry I can't provide more information but someone else may be able to.

Kevin ....

[Aditya_Chitale]

thanks everyone, I managed to change the owners in postgres via pgadmin. but needed to first unpublish the bookmarks.

Regards,

Aditya