Users that don't have a read right to a qlik sense App can still see generated reports

[OmarBenSalem]

Hello,

I have a situation to which I couldn't find a workaround.

Let me explain:

I have a Qlik Sense application : let's name it :App1  

I have a user : UserA who does NOT have the right to see App1

Now, in Nprinting, I created a connection to this App1, created a report and I'm sending emails to some users (one of them is UserA)

UserA can see the data in the generated report while, logically, he does not have the right to see the Sense app, thus, he shouldn't have the right to see the report associated to the app...

What should I do to prevent this from happening?

Any idea?

[Lech_Miszkiewicz]

One of the solution could be introduction of section access in your Qlik app and also NPrinting - then if your user does not have an access to app will also result in empty set for report (hence no report will be generated)..

[OmarBenSalem]

I'm already using a section access in the app in which the user can see a set of data.

So, if it's only was up to the SA, userA will see data BUT, what I want to do is, even if he could see it with the section access, if the USER does NOT have the right to see the APP (nore the Stream where the app is), he should NOT receive an email...

[Lech_Miszkiewicz]

1. It can be a hybrid of section access and user filters. I would load in data model flag in section access reduction/linking table. So the sole section access data reduction for your user A there is still data available, but selection applied on the flag for this user should bring empty set which will prevent from sending a report.

2. I am not sure how you add your recipients to publish tasks, but you could create NPrinting groups to link which users can see data from which Qlik Sense app. Then simply exclude user from this group. 

What I do not understand is why are you including your userA in your publish task recipient list? I guess we need to know more about your setup, requirements etc.

[Ruggero_Piccoli]

Hi,

Qlik NPrinting users are (or at least could be) different users than the Qlik Sense users. So, if you want to manage the users rights in Qlik NPrinting by using roles https://help.qlik.com/en-US/nprinting/September2019/Content/NPrinting/DeployingQVNprinting/Managing-....

So you could create the reports in an app and do not give to some users the rights to view that app.

Best Regards,

Ruggero