Section access is not working as expected : Need help

[dilip1234]

Hi All,

I am new to section access in Qlik sense.

I have following 3 tables with sample data:

Geo Table

GeoName	DocumentStatus	Sales
India	Completed	1400 INR
USA	Incomplete	2000 INR
Canada	Completed	4500 INR
ANZ	Completed	1500 INR
Russia	Incomplete	2500 INR

Zone Table

ZoneName	DocumentStatus	Sales
South	Completed	1400 INR
North	Incomplete	2000 INR
East	Completed	4500 INR
West	Completed	1500 INR
Central	Incomplete	2500 INR

Country Table

CountryName	DocumentStatus	Sales
India	Completed	1400 INR
USA	Incomplete	2000 INR
Canada	Completed	4500 INR
Australia	Completed	1500 INR
UK	Incomplete	2500 INR

Now I am showing these table information on map through geo-analytics as below.

Now when anyone logged on Qlik sense, then only logged in user associated records should get display.

e.g. Permission Matrix is as below:

UserName	PermissionType	Value
dir\jeeva	Geo	India
dir\jeeva	Geo	Canada
dir\prasad	Zone	South
dir\prasad	Country	India

As per above matrix when JEEVA logged in the qlik sense, he should see Geo (India and Canada), he should not see other geo, zone or countries.

My Section access query is as below:

SECTION ACCESS;

LOAD * INLINE

[

     ACCESS, NTNAME, GROUP, GEONAME

     USER, DIR\PRASAD, *, INDIA

     USER, DIR\JEEVA, *, INDIA

];

But when JEEVA is not logged in the Qlik sene, he is getting ACCESS DENIED issue.

Can anyone help me with this issue, might I am doing something wrong with section access script.

Thanks

Dilip Solanki

[Lauri]

Don't all usernames need to be upper case too?

SECTION APPLICATION;

LOAD

    Upper(USERID) as USERID,

     SA_GEONAME AS GEONAME

RESIDENT SA;

[dilip1234]

Ok. So you mean in my GeoTable, I do not have GeoName field name in uppercase. It should be GEONAME in GeoTable? Is that you are saying?

[dilip1234]

Hi John,

Thanks for your answer.

I am trying this section access on Qlik Sense Desktop, but it will not work in Qlik Desktop. So I have imported my app on Qlik server but not published. So I am loading data in my application from "Load Data" button in data load editor.

So now if required then where can I enter INTERNAL\SA_SCHEDULER as you have suggested?

[dilip1234]

Hi All,

I want to know one thing, that how section access works?

1. First all 3 tables (which I have mentioned in my question) data will be loaded.

2. Then column GEONAME, will linked with logged in user section access details. e.g. If Jeeva is logged in and Jeeva have only INDIA geo access, then only India Geo related records will be loaded from first step or how it will works?

I am just trying to understand the section access internal so might it could help me to resolve my concern.

Thanks all for suggestion so far.

[gabriel_as]

Check this linq:

Uso correcto de Section Access?

[dilip1234]

Hi Gabriel,

Seems this link is no longer available.

Not Found

The item does not exist. It may have been deleted.

Thanks

Dilip Solanki

[gabriel_as]

In summary it is something like this:

It turns out that I want to show data according to who registers through Section Access, I do it in 2 ways:

Method 1

Section Access;

LOAD * INLINE [

     ACCESS, USERID, PASSWORD, supCYC

     ADMIN, ADMIN, 1007, NOREDUCTION

     USER, USER1, 1256, SUPERVISOR1

];

Section Application;

Method 2

LOAD * INLINE [

     ACCESS, USERID, PASSWORD,% SUPERVISOR

     ADMIN, ADMIN, 1007, NOREDUCTION

     USER, USER1, 1256, SUPER1

];

Section Application;

LOAD * INLINE [

     SUPCYC,% SUPERVISOR

     SUPERVISOR1, SUPER1

];

Both methods show the correct information when opening my qvw as USER1 but when reloading the restriction is lost and it shows the data of all the supervisors and not only of the SUPERVISOR1

What do I do wrong or what should I do so that when I recharge I do not miss the reduction?

NOTE:

In Configurations - Document Properties - When Open, the boxes Initial Reduction ... and Strict Exclusion are selected

The right answer:

Section Access applies ONLY after the document is closed and reopened. You as administrator can reload the document and you will see all the values because you do not apply Section Access yet. When you save the document, close it and open it, Qlikview determines that the user tries to open the document and then applies security.

Qlikview knows that if you can upload the document, then you have access to the data and therefore you can see everything.

regards.

[dilip1234]

Hi Sasidhar,

Thanks for your answer.

I have done the way you have suggested, but I am afraid its not working.

When I am logged in on Qlik sense server I am getting below details:

Directory/Domain: DIR

UserId: dilip.solanki

Then how it should placed in USERID column of section access?

DIR\DILIP.SOLANKI

OR

DILIP.SOLANKI

Thanks

Dilip Solanki

[agigliotti]

yes that's right.

[agigliotti]

you should use in the format of DIR\DILIP.SOLANKI