Skip to main content
Announcements
Qlik Connect 2024! Seize endless possibilities! LEARN MORE
cancel
Showing results for 
Search instead for 
Did you mean: 
Not applicable

Section Access function not working for Admin profiles

Hello!  I am working with a simple implementation of the Section Access functionality, but once I reload the data, the functionality appears to be removed, only allowing a user defined to see everything (*) to see NONCONFIDENTIAL data.  My goal is to allow some users to see only data flagged as NONCONFIDENTIAL and other users to see everything.

I have also turned on the Settings --> Document Properties --> Opening --> Initial Data Reduction Based on Section Access

I am using an ADMIN access profile to test this, but my expectation is that the Section Access rules should apply to all users.  Is this correct? 

Here is the script code I am using:

Section Access;

LOAD * INLINE [

    ACCESS, NTNAME, INCLUDED

    ADMIN, SA\abrxyz, *

   ADMIN, SA\cvrxyz, NONCONFIDENTIAL

     

    USER, QV\JLxxxx, *

    USER, QV\SBxxxx, NONCONFIDENTIAL

  

    ];

Section Application;

1 Solution

Accepted Solutions
Colin-Albert

If the field INCLUDED has other values apart from NONCONFIDENTIAL then these must be added to the section access list.

In section access "*" does not mean all values, it means all listed values.

Try this - the DUMMY values will allow * to see NONCONFIDENTIAL, CONFIDENTIAL and SECRET values.

Section Access;

LOAD * INLINE [

    ACCESS, NTNAME, INCLUDED

    ADMIN, SA\abrxyz, *

    ADMIN, SA\cvrxyz, NONCONFIDENTIAL

    DUMMY, DUMMY, CONFIDENTIAL

    DUMMY, DUMMY, SECRET

    USER, QV\JLxxxx, *

    USER, QV\SBxxxx, NONCONFIDENTIAL

 

    ];

Section Application;

View solution in original post

5 Replies
Not applicable
Author

yes it will apply to admin too

Colin-Albert

If the field INCLUDED has other values apart from NONCONFIDENTIAL then these must be added to the section access list.

In section access "*" does not mean all values, it means all listed values.

Try this - the DUMMY values will allow * to see NONCONFIDENTIAL, CONFIDENTIAL and SECRET values.

Section Access;

LOAD * INLINE [

    ACCESS, NTNAME, INCLUDED

    ADMIN, SA\abrxyz, *

    ADMIN, SA\cvrxyz, NONCONFIDENTIAL

    DUMMY, DUMMY, CONFIDENTIAL

    DUMMY, DUMMY, SECRET

    USER, QV\JLxxxx, *

    USER, QV\SBxxxx, NONCONFIDENTIAL

 

    ];

Section Application;

Not applicable
Author

Thanks very much for your reply!  I can't seem to figure out why then if I set my profile to have full access (*) it still filters automatically on the NONCONFIDENTIAL data.  Is there another configuration step I am missing?

Not applicable
Author

As Colin said instead of *, add all the distinct values

Not applicable
Author

Outstanding!!  That was it!  Thanks very much for your assistance!