Access Control

[pooja_sn]

I need to implement Aunthorization in qlikview.

Our data contains few Regions and Businesses under each Region. User access should be restricted to limited Region and Businesses.

Eg. User ABC should be able to access LONDON,NEWYORK Region and Retails and Finance Business under these two regions.

I am willing to use OSUSer() as logged in user as our application will be accessed using browser.

How this can be achieved?

[pooja_sn]

A small query..
It doesn't work if I write 'USER' under ACCESS but it works fine for 'ADMIN". Why is that so?

[avinashelite]

could you please explain me whats not working ...data reduction ??

[pooja_sn]

Yes.

If I use below script I get can see data related to Division 02 but not 01.

SECTION ACCESS;
LOAD * INLINE [
ACCESS, NTNAME, DIVISIONID
USER, MYDOMAIN\MYUSERNAME, 01

ADMIN, MYDOMAIN\MYUSERNAME, 02

];

[avinashelite]

Since your assigning USER and ADMIN access to same user its not able to validate it properly ...try like this

this should work

SECTION ACCESS;
LOAD * INLINE [
ACCESS, NTNAME, DIVISIONID
ADMIN, MYDOMAIN\MYUSERNAME, 01

USER, MYDOMAIN\MYUSERNAME, 02

];

• Access Control

[avinashelite]

Did you tried my solution ?? still facing issue

[pooja_sn]

Yes. I believe assigning ADMIN and USER both accesses to same user is causing this issue.

If I assign only one of these to user ,it works fine.

[pooja_sn]

yes. your script also gives access to divisions pertaining to ADMIN access.

[avinashelite]

its working for me ....strange ...share the complete script

[pooja_sn]

SECTION ACCESS;
LOAD * INLINE [
ACCESS, NTNAME, DIVISIONID
ADMIN, domain\UserName,01
USER,domain\UserName,02
];

SECTION APPLICATION;

LOAD * INLINE [
DIVISIONID, description
01, bird-
02, food
];

[avinashelite]

could you please change all the data to upper case and then try ??