Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hello,
Could someone please explain how does wildcard '*' work with GROUP in Section access?
Example 1 - Granting access to a single user:
LOAD * INLINE[
ACCESS, USERID, REGION
USER, DOMANI\USER1, MUM
USER, DOMANI\USER2, PUN
USER, DOMANI\USER3, *
];
Section Application;
LOAD * INLINE[
Region, description
MUM, Mumbai
PUN, Pune
BLR, Banglore
];
What regions will User1, User2 & User3 see?
Example 2 - Granting access to a group of users:
LOAD * INLINE[
ACCESS, USERID, GROUP, REGION
USER, DOMANI\USER1, GROUP1, MUM
USER, DOMANI\USER2, GROUP2, PUN
USER, DOMANI\USER3, GROUP3, *
];
Section Application;
LOAD * INLINE[
Region, description
MUM, Mumbai
PUN, Pune
BLR, Banglore
];
What regions will User1, User2 & User3 see?
According to me-
In Example1- User 1 will see the Mumbai region, User 2 will see the Pune region & User 3 will see both Mumbai & Pune region but not Banglore (as it's not listed in the access table)
In Example2 - User 1 will see the Mumbai region, User 2 will see the Pune region & User 3 will see Mumbai, Pune & Banglore region ( as when '*' is used with GROUP then it refers to the whole data model & not just the listed values in access table)
P.S- I think this might be a silly question to some of you but I am really confused on how exactly wildcard '*' works with GROUP in Section Access.
Thanks a bunch!
in case of Example2, User 3 will be able to see only the Region values which are listed in the section access code when we specify "*" for that user. As you have specified "MUM" and "PUN" as the values in section access code, User 3 will be able to see only these regions "MUM" and "PUN"
Could you please refer below pdf page 3 & page 7 specifically. It says that the asterisk “*” with GROUP doesn't mean "all that are listed".
Even on Qlik Website: https://help.qlik.com/en-US/sense/September2020/Subsystems/Hub/Content/Sense_Hub/Scripting/Security/...
It says
"A wildcard, *, is interpreted as all (listed) values of this field, that is. a value listed elsewhere in this table. If used in one of the system fields (USERID, GROUP) in a table loaded in the access section of the script, it is interpreted as all (also not listed) possible values of this field."