Qlik Sense section access

[#1]

Hello guys, I have a problem with Section Access in Qlik Sense server.

I have implemented section access for row level security as the below code shows:

Section Access;

LOAD * inline [

ACCESS, USERID

USER, xx\xx

USER, yy\yy

USER, zz\zz

];

section application;

Load * inline [

USERID, TL2

xx\xx, *

yy\yy, Cars

zz\zz, *

];

Now for user yy\yy, everything is as desired and is restricting the meta-data of column TL2 to "Cars" only.

However for xx\xx and zz\zz, the data should not be restricted but however when they open the report, there is absolutely no data.

The users are being authenticated but the data is completely absent.

When I change the * to any parameter, it works but * does not work.

Thanks in advance.

[Gysbert_Wassenaar]

If you want to use TL2 to reduce the data for the users then you need to put it in the section access table.

[Anonymous]

Tips and tricks for section access in Qlik Sense (2.0+)

Have a look through this - Section Access has changed for Qlik Sense from QlikView you may know -  you can now add

REDUCTION field in order to determine the field on which the reduction is performed.

OMIT - Fields that should not be available to the GROUP or USERID

[#4]

‌Thanks for your reply but I'm firstly wondering as to how the script worked for the user yy/yy. If the code itself was wrong, nothing should have worked, right?

Besides, only the * is not working, others are.

thanks in advance.

regards,

SS.

[#5]

Adding on,

I tried this

Section Access;

LOAD * inline [

ACCESS, USERID, TL2, OMIT

USER, xx\xx, *, TL

USER, yy\yy, *,

USER, zz\zz, *,

];

This just says access denied to add users.

What is weird is that when I change user xx\xx to "Cars" instead of *, all users can see only "cars", it does not show access denied but limits everyone  to "Cars" only.

Also, don't I need Section Application?

reddys310‌, you have helped me in the past. Any advice?

[#6]

Can anyone help me on this please?

[marcohadiyanto · Accepted solution]

Hi Siddharth,

Section access script that you build already correct only miss list of data for (*).

A common misconception in section access is the use of “*” (star) in section access.

“Star” means “all listed values” not all values for the field. This will be explained in

detail in the script examples.

Section Access;

LOAD * inline [

ACCESS, USERID, TL2

USER, xx\xx, *

USER, yy\yy, Cars

USER, zz\zz, *

];

Section Application;

Example you have data

Load * inline [

TL2

Cars

Bus

Motorcycle

];

Then your section access script must include all the data for TL2 and user using dummy it's ok, it should be like this.

Section Access;

LOAD * inline [

ACCESS, USERID, TL2

USER, xx\xx, *

USER, yy\yy, Cars

USER, zz\zz, *

];

Load * inline [

ACCESS, USERID, TL2

USER, dummy\dummy, Cars

USER,dummy\dummy Bus

USER, dummy\dummy, Motorcycle

Section Application;

Attached documents that i get from community about section access on QlikView

Regards,

Marco

[#8]

Thanks Marco just one clarification. When you say listed values, you mean listed values in the Load statement of section access?

If that is the case then my * should only load an aggregate of Cars, Buses and Motorcycles acc to your statement?

Pretty useless feature if you ask me.

But thanks a lot for the clarification. Made a lot of sense.

[marcohadiyanto]

Hi,

Yes, all data should listed in section access, if you want limit by that data.

Regards,

[#10]

Okay, thanks a lot.