Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
In two qvw files, if it is loaded with binary load, will section access applied on other affect the next qvw? Will the section access be carried forward? Suppose this allows binary load, which option needs to be selected to follow this approach?
Sujit, my understanding of how things worked was that if you had Section Access in the binary, that definitely came through into the new document doing the binary load of the original and that any Section Access in the new app was concatenated to the binary loaded Section Access. I went to the one source I thought might have some clarification on this:
https://community.qlik.com/t5/Qlik-Design-Blog/A-Primer-on-Section-Access/ba-p/1465766
Unfortunately, HIC did not mention anything regarding binary load. Same strike out on the Help for Section Access as well:
Success on the following though:
There it does state Section Access is pulled in... It does not confirm exactly what happens if you also have a Section Access load in the new app...
I am going to reach out to one of the guys I know will likely know for sure to see if they can have a look at this post and leave a comment.
Regards,
Brett
Thanks Brett for this explanation.
Section access that comes with binary loaded file would override the destination file's section access (if any). To avoid this security goof up, you should always check 'Prohibit Binary Load' (Document Properties->Opening tab) where you have section access in the qvw file.
Hi Tresesco, Thanks for your reply! I am in a doubt that the 2nd qvw that's binary loaded from 1st will inherit the Section access from it's parent? I am trying to do so, but gives an error not sure if this is possible, or I'm making a mistake.
Please let me know what is the expected behaviour in this scenario.
What error message are you getting?
I don't have the scenario handy now. Would share it tonight. However, could you mention what to expect in this case.
Thanks!!
As I wrote in my first reply: should not be an error message, but security behavior should be controlled by the coming app section access rule.
While the application values (those not in the section access table) may concatenate or create synthetic keys, the last table with section access to be loaded will remain and override the previous ones.
Say I'm DOMAIN\USER1 and I have a File1.qvw with section access with the following line
USER, DOMAIN\USER1, SPAIN
Then I have File2.qvw that binary loads File1.qvw and section access with
USER, DOMAIN\USER1, FRANCE
When I open File2.qvw, I will only see FRANCE, the section access table in File2 overrode the previous one.
If you want to have both values, keep the section access code in a QVS file that you load via $(Include=). You can play with the name of the file and string functions to load different files in that include.
For example, I have a section access DEVELOPMENT.qvs which allows all developers to open the app and see fake data, not real, production data and PRODUCTION.qvs with all users including developers. I could choose which table I want to load based on which server the app is hosted.
Similarly, I could load both section access tables as normal tables, so they concatenate, then load that table with all values into a section access table via RESIDENT.
It says can not access the file file1.qvw 😞
That probably means that as per the section access in file2 user login doesn't have right to access data of file1.
Such difference between app1 and app2 could occur if the option of "strict exclusion" in the section access settings (document properties in tab open) is set differently, for example if it disabled in app1 and enabled in app2:
Section Access: Strict Exclusion
Another point are the set active directory access rights which might be set differently in any way.
- Marcus