Skip to main content
Announcements
Qlik Introduces a New Era of Visualization! READ ALL ABOUT IT
cancel
Showing results for 
Search instead for 
Did you mean: 
Somzz
Contributor II
Contributor II

Section Access - How does GROUP access works?

Hello,

Could someone please explain how does wildcard '*' work with GROUP in Section access?

 

Example 1 - Granting access to a single user:

LOAD * INLINE[

ACCESS, USERID, REGION

USER, DOMANI\USER1, MUM

USER, DOMANI\USER2, PUN

USER, DOMANI\USER3, *

];

Section Application;

LOAD * INLINE[

Region, description

MUM, Mumbai

PUN, Pune

BLR, Banglore

];

What regions will User1, User2 & User3 see?

 

Example 2 - Granting access to a group of users:

LOAD * INLINE[

ACCESS, USERID, GROUP, REGION

USER, DOMANI\USER1, GROUP1, MUM

USER, DOMANI\USER2, GROUP2, PUN

USER, DOMANI\USER3, GROUP3,  *

];

Section Application;

LOAD * INLINE[

Region, description

MUM, Mumbai

PUN, Pune

BLR, Banglore

];

What regions will User1, User2 & User3 see?

 

According to me- 

In Example1- User 1 will see the Mumbai region, User 2 will see the Pune region & User 3 will see both Mumbai & Pune region but not Banglore (as it's not listed in the access table)

 

In Example2 - User 1 will see the Mumbai region, User 2 will see the Pune region & User 3 will see Mumbai, Pune & Banglore region ( as when '*' is used with GROUP then it refers to the whole data model & not just the listed values in access table)

 

P.S- I think this might be a silly question to some of you but I am really confused on how exactly wildcard '*' works with GROUP in Section Access. 

Thanks a bunch! 

2 Replies
ramchalla
Creator
Creator

@Somzz 

in case of Example2, User 3 will be able to see only the Region values which are listed in the section access code when we specify "*" for that user. As you have specified "MUM" and "PUN" as the values in section access code, User 3 will be able to see only these regions "MUM" and "PUN"

Somzz
Contributor II
Contributor II
Author

Could you please refer below pdf page 3 & page 7 specifically. It says that the asterisk “*” with GROUP doesn't mean "all that are listed". 

Even on Qlik Website: https://help.qlik.com/en-US/sense/September2020/Subsystems/Hub/Content/Sense_Hub/Scripting/Security/... 

It says

"A wildcard, *, is interpreted as all (listed) values of this field, that is. a value listed elsewhere in this table. If used in one of the system fields (USERID, GROUP) in a table loaded in the access section of the script, it is interpreted as all (also not listed) possible values of this field."