Control of user actions when exporting a file containing sensitive or protected information from the qlikview web application

[mickds88]

The problem:
In order to control the downloading of sensitive or protected information by users from the qlikview web application, the information security administrator needs the ability to compare user actions in logging files and the name of the downloaded file.

What we have:

QlikView Build Info: release/QV12-40/63
When a user exports a file from the qlikview web application, the server creates the file in a folder ..\ProgramData\QlikTech\qlikviewserver\Temp and then passes it to the user's machine. An entry is made in the audit file about the export of the file. However, it is not possible to uniquely match the name of the downloaded file and the entry in the audit file.

The proposed solution:
We suggest adding a field containing the name of the downloaded file to the logging file, and adding a session ID to each file name. This structure will allow you to uniquely determine the type and volume of information downloaded by the user. In order for this system to work, we need to create an application that transfers the downloaded files from ..\ProgramData\QlikTech\qlikviewserver\Temp to the archive database

We ask for help in solving the problem.

[Bill_Britt]

Hi,

A lot of places don't allow downloads anymore, because once it is downloaded it can be removed from the location. However, this is a good idea and I would recommend you put it in as an Idea.

Product Insight & Ideas