Folder Data Connection allows to see folders where the Service Account has access instead of using the credentials of the authenticated user in the hub.
When creating a folder connector any user that has access to the specific Folder Data Connection can access the server's local disks. (e.g. usually access all files on c:\ drive)
Environment:
Qlik Sense Enterprise on Windows, all versions
When creating the Folder Data Connection, access the file system is granted to the service account running the Qlik Sense services, not the end-user that has access to the specific Folder Data Connection.
Resolution
This behaviour is considered to be Working as Designed.
If users should not be granted read permissions to the directories in the local hard drive where the Qlik Sense nodes are installed, ensure the Folder Data Connection is protected by a security rule.
Qlik has previously received feedback on this feature and recorded the request for future review. For more information, see Limit disk file access in Qlik Sense folder connection based on the developers user account
Related Content
Read only access for a Folder Connection in Qlik Sense Enterprise