Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 
DMG
Contributor III
Contributor III

Understanding Access Model

Hi i'm struggling to understand and get section based access working, i've create three tabs in an excel book to test this

User_Data

USERIDUSERNAMEACCESS
domain\userid1DavidUSER

 

Role_Mapping

OUCUSERID
TA1domain\userid1
TA2domain\userid1

(replaced with the correct windows domain and user id's that we use for authentication)


Vuln_Data

OUCAPPIDAPPNAMEVCATVSTATUS
TA1APPID1TESTAPP1AOpen
TA1APPID2TESTAPP2AOpen
TA1APPID3TESTAPP3AClosed
TA1APPID4TESTAPP4AOpen
TA2APPID5TESTAPP5AOpen
TA3APPID6TESTAPP6AOpen
TA4APPID7TESTAPP7AOpen
TA5APPID8TESTAPP8AClosed
TA5APPID9TESTAPP9AOpen

 

In effect each user will be mapped to a list of ouc's they can access. Those ouc's are then mapped to the data, so if a user is mapped to an ouc, they should then only be able to see the data rows that match the same ouc.

My data load section looks like this

 

[IdentityRole]:
LOAD
[USERID],
[USERNAME],
[ACCESS]
FROM [lib://AttachedFiles/Qlik_V_Data_Test.xlsx]
(ooxml, embedded labels, table is User_Data);

[IdentityItem]:
LOAD
[OUC],
[USERID]
FROM [lib://AttachedFiles/Qlik_V_Data_Test.xlsx]
(ooxml, embedded labels, table is Role_Mapping);

[Vuln_Data]:
LOAD
[OUC],
[APPID],
[APPNAME],
[VCAT],
[VSTATUS]
FROM [lib://AttachedFiles/Qlik_V_Data_Test.xlsx]
(ooxml, embedded labels, table is Vuln_Data);

 

Is this the correct way to assemble user access, because despite my user id only be mapped to ouc 1 and 2 i seem able to a see all data ?

1 Reply
DMG
Contributor III
Contributor III
Author

Think i've fixed it, turns out i missed out the  Section Application; and Section Access precursors to the tables