Access

qlik_venu · ‎2011-10-22

Hi All,

We need to implement section access for the users.

The security will be based on 2 dimensions. Region and Year. ( A certain user will have access to few regions and few years only.)

So I tried variuos combinations and finally this works fine. But wanted to make sure if this is the right approach.

Section Access;

LOAD * INLINE [

ACCESS , USERID , PASSWORD , REGION , YEAR

ADMIN , ADMIN , ADMIN ,

USER , USER1 , U1 , AFRICA , 2010

USER , USER2 , U2 , AMERICA , 2010

USER , USER3 , U3 , ASIA , 2010

USER , USER4 , U4 , EUROPE ,

USER , USER4 , U4 , AMERICA ,

USER , USER4 , U4 , ,2010

USER , USER5 , U5, *, *

];

for the USER4, the access is for 2010 year alone and Regions as Europe and America.

So do I have to represent this by 3 lines as indicated above. First 2 rows of the USER4 is for the Region and 3rd row for USER4 is for the 2010 year.

Please let me know if this is the right approach.

Thanks,

Venu

Miguel_Angel_Baeyens · ‎2011-10-22

Hi Venu,

If you want to simulate how section access will work, just do the selections you need in the corresponding fields, then go to the File menu, Reduce Data and select "Keep Possible Values". That will remove (reduce) from memory all records that are excluded by that selection.

In regards to your section access code above, just two notes:

USER4 will work with two lines Europe, 2010 and America, 2010
In a server - client environment, the blank doesn't work, and all users, even when they have been set otherwise, are considered with ACCESS = USER, that means that, for example, User5 will see only those regions and years listed in section access, not all possible values in yoru data model (for example, if you have as well data for 2011, neither ADMIN nor User5 will see it).

Hope that helps.

Miguel Angel Baeyens

BI Consultant

Comex Grupo Ibérica

qlik_venu · ‎2011-10-22

Hi Miguel,

I am trying to do the Section access to build a sceruity across 2 dimensions.

And yes as per your suggestion, I have updated te file.

But i obeserved that ADMIN user is able to see all the years 2010, 2011, even though 2011 is not there in the SECTION ACCESS field value.

and to make the USER5 to view the 2011, i included 2 rows for the ADMIN.