Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hi
We have multiple applications in the same folder(root folder), but we want to show some application for some users in accesspoint and others shouldn't view the application in accesspoint. Can we do apply security in app level?
I believe we can do this in adding or removing user group in application properties.
Thanks
Sat
Please check SECTION ACCESS.
Users are able to see only those documents, for which they have access.
Peter
Please check the attached document
If you don't have Publisher, you can control access by setting the Windows Security permissions on the file. This is sometimes made easier by putting the apps in separate folders so you don't have to worry about file permissions getting overlayed by folder permissions.
-Rob
Once a user has been authenticated, QlikView Server typically handles authorization on its own. QlikView Server provides the choice between storing the ACL information as Windows NTFS privileges (applicable only when the user is authenticated using a Windows user identity) or by storing the ACL information in the internal repository, Document Metadata Service (DMS), in QlikView. The choice of NTFS or DMS affects the access to all documents in QlikView Server.
QlikView Server can use the NTFS privileges of the Windows file system to store authorization information. When in NTFS authorization mode, QlikView Server controls access to a given QlikView document by determining if the authenticated user has NTFS privileges to the underlying QlikView document file (.qvw). This is based on the operating system privileges and Windows NTFS is used for the ACL. The privileges of the authenticated user are configured by a server administrator using standard Windows Explorer functionality via directory properties options.
As an alternative to Windows NTFS, QlikView can use its own ACL, DMS. Unlike NTFS, this allows non-Windows users and groups to be authorized to access applications and data. DMS integrates fully with the existing Directory Service Provider (for example, Active Directory, other LDAP) where Group Membership has been recorded – this is a mechanism by which QlikView Server can re-use existing enterprise accounts and group structures. The permitted users or groups are recorded in a meta file that resides next to the QlikView document, and it is managed using QMC.
NTFS is the default document authorization model, suitable when all users and groups are identified in Active Directory or locally on the QlikView Server host. The NTFS permissions may be inherited from the directory that the QlikView documents are in, or may be assigned using QlikView Publisher distribution tasks.
DMS is required when the authenticated user identity is not a Windows user account. The DMS permissions are explicitly assigned using QMC, or may be assigned using QlikView Publisher distribution tasks.
DMS is only available with QlikView Server Enterprise Edition
Good point. If you have EE Server, you can use DMS for authorization. Much easier than changing windows permissions, because you can manage it from the QMC.
-Rob
Hi,
Try Section Access for this. There are lot of examples in Community and in Qlikview help file.
Authentication and Authorization in Qlikview
If you just want user level then use below script
Section Access;
LOAD * INLINE [
ACCESS, USERID
ADMIN, Admin
USER, Sales
USER, Market
];
Section Application;
Regards,
jagan.
Yes you can restrict the users with the help of Section Access.
With this respect, only the authorized users will b able to view the apps.
Hi,
If you do not have Enterprise Edition and if you are having Small Business Edition then you can also use the Windows Setting to restrict use to view applications on accesspoint.
All you have to do is for each of the application, go to properties and remove the Users Group from security and add only users which should have access to that document (Application).
Once you do this, restart Qlik Services to take immediate effect.
Regards,
Kaushik Solanki
Thank you all for your replies. We will go with section access if we can't do anything on windows level because we are not going to apply the data level security.
We are going to migrate current server to new server with DMS authentication. We will try Sébastien Fatoux recommendation.