Re: Section Access Issues ? - Qlik Community

Report Inappropriate Content · ‎2015-10-01

Issue with section access

In security of document we use below options:

Opening - Initial Data Reduction Based on Section Access
Server – Filter Accesspoint Document list Based on Section Access.

Section access:

Load * [

ACCESS, NTNAME, KEY

USER, WIN\T10255, 23FD|232|34

USER, WIN\T10257, 23AD|242|14

USER, WIN\T10258, 23RD|262|54

USER, WIN\T10259, 23YD|282|84

ADMIN,WIN\ADMIN_AD_GROUP, *|*|*

USER, WIN\TRAINING, 23RT|656|98

]

Section application;

When user 10255 logs in in desktop it is working perfectly.

But when the same report is checked in server (WEB URL) it logs in with the security AD group ADMIN_AD_GROUP.

The same happens for other who are not a member of ADMIN_AD_GROUP.

i.e. other users are also able to log with the admin ad group. Even though the users are not available in ADMIN id why QlikView takes those users.

When removed admin group then the section access works correctly for each seperate users.

The document opens correctly by checking the users list but the data is show for admin ID only.

In Security :

If –“Initial Selection based on Section Access” – this correctly selects the data , but when we give clear and unlock it shows data for others users also.

Please provide solution and weird behaviour of this section access.

Report Inappropriate Content · ‎2015-10-01

Puratchi, your submission reads like QlikView and not Qlik Sense. Please confirm the appropriate product so we can make sure the question is stored in the proper section.

As for your issue, when you open in browser, what credentials are cached in the browser? Are you impersonating one of the users or is the cached user a member of the ADMIN_AD_GROUP?

In addition, I see an issue with your code in a couple of places. Is your code intended to be inline? If so, your script needs to start with Load * Inline then the bracketed data. Next, the asterisks for the KEY, unless that is how you set up the data then all you need to supply is a single asterisk to represent the relevant values that have been entered in the section access script.

Regards,

Jeff G

Report Inappropriate Content · ‎2015-10-01

Sorry jeff its a typo mistake instead of showing actual data i just masked with sample data.

This is for Qlikview

We use

Section access:

Load ACCESS, NTNAME, KEY resident EmployeeTable;

Section application;

ADMIN_AD_GROUP is a group in which certail developers have access.

TRAINING is a group who actually uses the report.

Issue: When some one from TRAINING logs in it allows him but data is filtered for ADMIN_AD_GROUP instead of his own ID. When using “Initial Selection based on Section Access” is excatly selects the data , But data reduction does not work in this case.

This is just a example of how the data is in the table