Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW
cancel
Showing results for 
Search instead for 
Did you mean: 
johannesholzer
Contributor III
Contributor III

Section Access/ODAG - access has been denied after reload.

Hi I think I know the basics about Section Access, and I read:

A great primer to Section Access by Gustav Guldberg of QlikView Support.

As well I read how to test the application:

https://community.qlik.com/t5/New-to-Qlik-Sense/Section-Access-Testing-in-Qlik-Sense-Server-Dec-2017...

 

===============================

I open my application with section access from an aggreagated app via ODAG. 

Unfortunately I have my Qlik Sense in German and I don't see the english error.

"Zugriff wurde nach dem Ladevorgang verweigert. Überprüfen Sie, ob der Benutzer, der das Skript lädt, im Abschnitt des Section Access des Scripts enthalten ist."

In English most probably "Access was denied after loading. Verify that the user loading the script is included in the section Section Access of the script."

===================================

So my user (from OSUser() ) is like 

UserDirectory = AB-MAIN;UserId=jho

===================================

Section Access;

Authorization:
LOAD
'USER' as ACCESS,
'MB-MAIN\' & lower(KURZ) as NTNAME,
KURZ_BETREUER as KURZZEICHEN
FROM [$(vG.ExtractPath)DWHADMIN_VW_USER_BETREUER.qvd]
(qvd);


join(Authorization)
LOAD
'USER' as ACCESS,
// 'MB-MAIN\' & KURZ as USERID,
'MB-MAIN\' & lower(KURZ) as NTNAME,
SEGMENT_ID as SEGMENT_ODS_ID
FROM [$(vG.ExtractPath)DWHADMIN_VW_USER_SEGMENT.qvd]
(qvd);


inner join(Authorization)
LOAD
DIMENSION_KEY as %Key_Betreuer,
KURZZEICHEN
FROM [$(vG.ExtractPath)DIM_BETREUER_V.qvd]
(qvd);

inner join(Authorization)
LOAD
DIMENSION_KEY as %Key_Segment,
SEGMENT_ODS_ID
FROM [$(vG.ExtractPath)DIM_SEGMENT_TAB.qvd]
(qvd);

 

tmp_Authorization:
NoConcatenate
load
ACCESS
,NTNAME
,%Key_Segment&'|'&%Key_Betreuer as %KEY_SEGBETR
resident Authorization
;
load * Inline [
ACCESS,NTNAME,%KEY_SEGBETR
ADMIN,AB-MAIN\jho,
];
drop table Authorization;

rename Table tmp_Authorization to Authorization;

 

section Application;

tmpLinkTable_PC:
NoConcatenate
load
*
,%Key_Segment&'|'&%Key_Betreuer as %KEY_SEGBETR
resident LinkTable_PC;

drop table LinkTable_PC;
rename table tmpLinkTable_PC to LinkTable_PC;

============================

Any idea what's the problem?

Thank you very much in advance.

Labels (3)
1 Solution

Accepted Solutions
johannesholzer
Contributor III
Contributor III
Author

Thank you very much - the both of you.

In the end the solution was that I had to include as well the domain in the field USERID: AB-MAIN\jho

I thought thats only needed for the NTNAME.

View solution in original post

4 Replies
Lauri
Specialist
Specialist

Try troubleshooting by loading only your first table (FROM [$(vG.ExtractPath)DWHADMIN_VW_USER_BETREUER.qvd), and incrementally add the others until you identify which load statement is causing the problem.
y_grynechko
Creator III
Creator III

Hey, I had a similar issue and for me the solution was to create joined table before the section access. 

And believe me I am not sure why it works that way, mb someone here can answer that. 

So what I did:

1.Before the section access I created new section in which I did all of the join operations and all of the filtering

2. saved the results to the new QVD

3. Drop the table from the app

4. Created new section for section access where I just load the data from QVD, without any operations/filtering  

johannesholzer
Contributor III
Contributor III
Author

Now I pushed all the logic to the database view. I'm still not getting access. The only thing I'm loading now is: 

 

Section Access;


Set vL.TableName = 'Authorization';
$(vL.TableName):
LOAD
"ACCESS",
// "USERID",
NTNAME,
DIM_SEGMENT_BETREUER_KEY as %KEY_SEGBETR
FROM [$(vG.ExtractPath)BETREUER_ACCESS.qvd]
(qvd);


load * Inline [
ACCESS,NTNAME,%KEY_SEGBETR
ADMIN,AB-MAIN\jho,
];


section Application;

johannesholzer
Contributor III
Contributor III
Author

Thank you very much - the both of you.

In the end the solution was that I had to include as well the domain in the field USERID: AB-MAIN\jho

I thought thats only needed for the NTNAME.