Qlik Community

Qlik Sense Deployment & Management

Discussion board where members learn more about Qlik Sense Installation, Deployment and Management.

biob_stein
Contributor

QlikSense ist not using filesystem-permissions of logged user?

Hi Community,

i recently noticed that after we add a data connection (type:folder), that points to an network file system with QVDs,

users while using this data connection see all Subfolders and Files, even if they have not the filesystem-permissions.

In QlikView the filesystem-permissions of the logged user are passed and used, but this is not happening in QlikSense?

So how can we restrict User-access to sub-folders, if we can not do this on the filesystem-permission level as QlikSense does not use this for the logged user ??

Thanks for explaining and help!

2 Replies
korsikov
Valued Contributor II

Re: QlikSense ist not using filesystem-permissions of logged user?

this is a very interesting question. I also worried about how to manage access to the data on the disk for different users.

the user on whose behalf the work service has administrative privileges on the local machine, and it is available all the data on the disk. So you must use Securityrules QS.

As I see it.

Rights to create Folder Data Connection has only RootAdmin, ContentAdmin, SecurityAdmin.

I think you need to create manually for specific groups of users Folder Data Connection and allow access.

For example.

c:\QVD folders has sub folder Dev, RnD, Support, Audit

Create Custom Propertis User_Type with value Dev, RnD, Support, Audit

Create 4 Folder Data connection and give the appropriate security rights in QS

Assign users to the required custom properties

Users will have access to a particular directory and files in it In accordance with the appointment of custom properties.

This is my vision to solve this problem. However, it is unclear what to do with the users who have the right to create a Folder Data connection

korsikov
Valued Contributor II

Re: QlikSense ist not using filesystem-permissions of logged user?

p.s. I have not found the possibility to forbid the user to access subfolders. there is was your main question.

Community Browser