We are using QSEoW. We have an app that does not contain Section Access and is published to a stream. It contains a valid data model, contains data and has a dozen sheets with charts. Some users can open the app and see the data just fine. But other users get "Access Denied" error message. I've checked the following items for one of these "Access Denied" users:
User Access on the App Objects
User Access on the App
User Access on the Stream
Licensing (the user is Allocated)
User account, all looks good there.
User Directory Connector, all appears to be working here as well.
I don't know what else to check. I tried looking through some log files on the server but honestly don't know what I'm looking for. I'd really appreciate it if someone could give me some other things to check or point me to a specific keyword in a specific log file look for.
This is the most likely culprit when object/app/stream access all look fine. Check the Security Rules in the QMC:
In QSEoW, the default stream read rule grants access to all authenticated users. If someone overrode or replaced this with a more restrictive rule, users not matching the condition get Access Denied even though everything else looks fine. QMC → Security Rules → Audit Set Resource filter to App_* or the specific App GUID, Set User to the affected user, Run it and look for any red/denied rows - it will tell you exactly which rule is blocking them
Mark the solution as accepted that solved your problem and if you found it useful, press the like button! Check out my YouTube Channel | Follow me on LinkedIn
This is the most likely culprit when object/app/stream access all look fine. Check the Security Rules in the QMC:
In QSEoW, the default stream read rule grants access to all authenticated users. If someone overrode or replaced this with a more restrictive rule, users not matching the condition get Access Denied even though everything else looks fine. QMC → Security Rules → Audit Set Resource filter to App_* or the specific App GUID, Set User to the affected user, Run it and look for any red/denied rows - it will tell you exactly which rule is blocking them
Mark the solution as accepted that solved your problem and if you found it useful, press the like button! Check out my YouTube Channel | Follow me on LinkedIn
