Skip to main content
Announcements
Join us at Qlik Connect for 3 magical days of learning, networking,and inspiration! REGISTER TODAY and save!
cancel
Showing results for 
Search instead for 
Did you mean: 
sujit_nath
Creator III
Creator III

Binary load with Section Access

In two qvw files, if it is loaded with binary load, will section access applied on other affect the next qvw? Will the section access be carried forward? Suppose this allows binary load, which option needs to be selected to follow this approach?

Labels (2)
2 Solutions

Accepted Solutions
Brett_Bleess
Former Employee
Former Employee

Sujit, my understanding of how things worked was that if you had Section Access in the binary, that definitely came through into the new document doing the binary load of the original and that any Section Access in the new app was concatenated to the binary loaded Section Access.  I went to the one source I thought might have some clarification on this:

https://community.qlik.com/t5/Qlik-Design-Blog/A-Primer-on-Section-Access/ba-p/1465766

Unfortunately, HIC did not mention anything regarding binary load.  Same strike out on the Help for Section Access as well:

https://help.qlik.com/en-US/qlikview/April2019/Subsystems/QMC/Content/QV_QMC/QMC_Users_SectionAccess...

Success on the following though:

https://help.qlik.com/en-US/qlikview/April2019/Subsystems/Client/Content/QV_QlikView/Scripting/Scrip...

There it does state Section Access is pulled in...  It does not confirm exactly what happens if you also have a Section Access load in the new app...

I am going to reach out to one of the guys I know will likely know for sure to see if they can have a look at this post and leave a comment.

Regards,
Brett

To help users find verified answers, please do not forget to use the "Accept as Solution" button on any post(s) that helped you resolve your problem or question.
I now work a compressed schedule, Tuesday, Wednesday and Thursday, so those will be the days I will reply to any follow-up posts.

View solution in original post

sujit_nath
Creator III
Creator III
Author

Thanks Brett for this explanation.

View solution in original post

11 Replies
tresesco
MVP
MVP

Section access that comes with binary loaded file would override the destination file's section access (if any). To avoid this security goof up, you should always check 'Prohibit Binary Load' (Document Properties->Opening tab) where you have section access in the qvw file.

sujit_nath
Creator III
Creator III
Author

Hi Tresesco, Thanks for your reply! I am in a doubt that the 2nd qvw that's binary loaded from 1st will inherit the Section access from it's parent? I am trying to do so, but gives an error not sure if this is possible, or I'm making a mistake.

Please let me know what is the expected behaviour in this scenario.

tresesco
MVP
MVP

What error message are you getting?

sujit_nath
Creator III
Creator III
Author

I don't have the scenario handy now. Would share it tonight. However, could you mention what to expect in this case.

Thanks!!

tresesco
MVP
MVP

As I wrote in my first reply: should not be an error message, but security behavior should be controlled by the coming app section access rule. 

Miguel_Angel_Baeyens

While the application values (those not in the section access table) may concatenate or create synthetic keys, the last table with section access to be loaded will remain and override the previous ones.

Say I'm DOMAIN\USER1 and I have a File1.qvw with section access with the following line

USER, DOMAIN\USER1, SPAIN

Then I have File2.qvw that binary loads File1.qvw and section access with 

USER, DOMAIN\USER1, FRANCE

When I open File2.qvw, I will only see FRANCE, the section access table in File2 overrode the previous one.

If you want to have both values, keep the section access code in a QVS file that you load via $(Include=). You can play with the name of the file and string functions to load different files in that include.

For example, I have a section access DEVELOPMENT.qvs which allows all developers to open the app and see fake data, not real, production data and PRODUCTION.qvs with all users including developers. I could choose which table I want to load based on which server the app is hosted.

Similarly, I could load both section access tables as normal tables, so they concatenate, then load that table with all values into a section access table via RESIDENT.

sujit_nath
Creator III
Creator III
Author

It says can not access the file file1.qvw 😞

tresesco
MVP
MVP

That probably means that as per the section access in file2 user login doesn't have right to access data of file1.

marcus_sommer

Such difference between app1 and app2 could occur if the option of "strict exclusion" in the section access settings (document properties in tab open) is set differently, for example if it disabled in app1 and enabled in app2:

Section Access: Strict Exclusion

Another point are the set active directory access rights which might be set differently in any way.

- Marcus