Issue in Using NTNAME in Section Access and reloading the application using Publisher.

[#1]

Hi All,

I have applied the section Access based on NTNAME in my application. When I am scheduling the application for reload using publisher , the reload of the application is Failed.

But I implement the Section Access based on the USERID and PASSWORD and specify the USERID and PASSWORD while scheduling a task under Reload its working fine .

I want to implement the section access based on NTNAME and reload the application using the Publisher.. Can any one guide me what more I have to consider in the section access to achive this .

Regards,

Chakravarthy.

[#2]

few other points to check

1. Make sue your publisher network id is provided with a ADMIN access and also * in the data reduction column.

2. I would advise you load the section access table data as a separate table or save as a qvd or csv and check how the data looks like.

3. use the star is *; statement.

if the above doesn't help, then would advise you raising this with QlikTech. As few others having the same issue, it could be a SR related issue.

Note that we are on QV 11.20.12018.0 and section access is working without any issues.......

[#3]

Thanks Muralidhar,

Seems it is a random error.

I find that the security work on 11.20.11922.0 but not work on 11.20.12018.0.

But if I create a new report and create the security access on 11.20.12018.0, it works..

[hopkinsc]

I have the same issue, it works as expected opening from the desktop client and from access point (using the source qvw) but if i open the distributed qvw (from accesspoint and Client)i am getting the service account NTNAME.

did anyone manage to resolve this?

[pauljohansson]

Hi hopkinsc,

In my case it was a "data" related problem.

More specifically, the service account user that run on the Qlikview Accesspoint had erronoues access data.

So, the solution in my case was simply to make sure that the service account running  on the access point dont have any access restrictions. -  So you might want to double check what access you have for this user.

br

Paul

[jldengra]

Hi,

I have a similar issue.

I am performing a migration from QlikView 11 SR2 to QlikView 11.20 SR4 in another server with a test licence for the migration, and permissions don't work since they are always applied to the service account user in the last server version, while the same .qvw permissions works in the previous server and also works in the last version of QlikView desktop, but it fails when reloaded and distributed by publisher. Debugging I can check that OSUser() returns the correct user, but showing the NTNAME replicated from the section access it is instead the service account.

It is inconsistent and a great trouble for us, since we need to perform the migration as soon as possible without any functional loss, and many business rules are customized per user and not working fine in Publisher in this last server version. The installed version of the new server with this issue is 11.20.12129

I would appreciate any advice on this matter.

Thank you in advance.

[Anonymous]

Hi José Luis and everybody, did you found a solution for this issue? I'm struggling with this too

[#8]

I had this problem some time back, I was able to fix it by removing the ADMIN username that runs your Qlikview services including publisher from the Section Application section of your section access script. Leave it in the first section access section where you list the users and permissions but DO NOT list it in section application

[jldengra · Accepted solution]

Thank you, Robert.

We finally found it is a problem related to distribution in Publisher, which fails when applying some kind of permissions associated to the interface objects while other permissions are properly applied to limit the data. Since we did not find a way to make Publisher distribute correctly these permissions, our solution has been to only reload in Publisher and perform the distribution by a second QV application step that copy the reloaded document from the source directory to the publishing one. This issue only occured in that document, for the rest of our documents, Publisher distributes well.

[1000qlik]

Hi hopkinsc,

I have encountered a similar issue and found a solution.

My script is the following:

Star is *;
 Section Access;
 
 
SECTION_ACCESS:
 LOAD 
 ACCESS, 
 upper(NTNAME) as NTNAME, 
 SEC_FIELD
 FROM $(vSectionAccess);
 
 Section Application;
 
 
SHEET_SECURITY:
 LOAD 
 UPPER(USERS) as NTNAME, 
 SH_PRIVATE as %SH_PRIVATE,
 SH_COMMON as %SH_COMMON     
 FROM
 [Sheet Access.xlsx]
 (ooxml, embedded labels, header is 1 lines, table is Sheet1); 

In the section access table there is the Service Account specified with full access (*).

However, if I specify the service account in the Sheet_Security table, then the Publisher will reduce this table on the service account name.

So I have just removed the service account from the Sheet_Security table and it works without issue.

I hope this helps.

[ksmith24]

That works for me also (removing the ADMIN username that runs your Qlikview services including publisher from the Section Application section of your section access script. Leave it in the first section access section where you list the users and permissions but DO NOT list it in section application)