*** Another Section Access Question ***

[IAMDV]

Hi Guys,

I hope one of you can help! I've searched on community but I couldn't find anything relevant.

I have two documents.

1: Master.QVW with Section Access

LOAD * INLINE [
    MYFIELD
    1
    2
    3
];

Section Access;
LOAD * INLINE [
    ACCESS, USERID, PASSWORD, MYFIELD
    ADMIN, ADMIN, ADMIN,
    USER, TEST, TEST, 1
];
Section Application;
When I open MASTER.QVW with "Initial Data Reduction with Section Access" everything works as expected. I.E. TEST user can only see 1 value and ADMIN no can see everything! No surprises so far

2: APP.QVW with/without Section Access

I'm using binary load in APP.QVW which is referring to Master.QVW . When I reload APP.QVW; I can see the USERID & PASSWORD prompt and when I enter the prompt with TEST & TEST respectively then I see all the data from MYFIELD instead of 1 row.

Either I'm not thinking right here or this must be bug because anyone can perform binary reload and get all the data!!! I'm well aware of "Prohibit Binary Load" option but that's not what I'm looking for... instead I wanted to see "1" value for MYFIELD in APP.QVW.

Please let me know if this doesn't make sense!

Thanks in advance.

Cheers,

DV

[Anonymous]

I think it is not much different from the situation when user with restricted access is allowed to reload.  Reload brings all the data in this case.  Data is restricted only if the user close/reopen.

Here the initial application is saved with all data.  The fact that the user is "restricted" doesn't make any difference - reload overrides it.

Regards,

Michael

[Luis_Cortizo]

Yep, I agree.

[IAMDV]

Hi Luis - Thanks for mocking up quick example. It's fine when I open BinaryTest_SA.QVW but when I reload the document then I'd see all the data. That's what seriously concerns me but I guess I have to live with this one. So it's really important to have check the "Prohibit Binary Load" setting on sensitive applications.

Update:

Totally agreed guys! I have nothing more to say rather than walking on a tight rope. Many thanks for active participation and suggestions. I owe you the points for your time.

(Pretending!)

Thanks,

DV

[Luis_Cortizo]

Yes, for me that would be the conclussion. The Section Access is only effective when opening the document. Whenever anyone is allowed to reload it reads all the information as Michael wisely pointed out.

The most effective way of prohibit to extract information out of a QlikView document is deny the possibility to perform a binary load of it.

Best regards.

[Anonymous]

So it's really important to have check the "Prohibit Binary Load" setting on sensitive applications.

Exactly