Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Qlik Open Lakehouse is Now Generally Available! Discover the key highlights and partner resources here.
cancel
Showing results for 
Search instead for 
Did you mean: 
Not applicable

Data reduction heirarchy type

i'm trying to put a heirarchial type security system into the section application but cant get my head round it.

what i want is 3 tier system where the users have access to the bottom level, e.g. data reduced specific to their team. then the next stage for department heads where data is reduced to that department, and then the top level(other than admin etc) has access to all departments.

so i might have.

accountteamdepartmentcompany
ACCTATEAMADEPT1COMP
ACCTBTEAMBDEPT2COMP
ACCTCTEAMCDEPT1COMP
ACCTDTEAMDDEPT2COMP


and users

UserCONNECT
rsmithTEAMA
nstoneTEAMB
pjonesTEAMC
mparkerTEAMD
jyoungDEPT1
mrogersDEPT2
dbrentCOMP


i'm just after some clarification to how this is read by the system and how it would be possible.

one idea i did have was to read in the 1st table 3 times, once for each column under the same heading. would that work?
then if when it matches the CONNECT for data reduction it'll pick up all the neccessarry accounts.

i'll give it a try, and let you know how it goes!

1 Solution

Accepted Solutions
Not applicable
Author

i managed to get it working! yay me!

i've attached an example.

its a world cup thing i had created but now with data reduction dependant on country, group and continent. these fields dont have to be heirarchial but would work just the same if they were.

ok, try logging in as the following users: sblatter, mlippi, fcapello, nmandela, hwebb, mplatini. password for all is 'fifa' as is the pword for hidden script.

heres part of the section access file

TeamTNAMEGROUPCONT
USAUSAGRPCAME
ItalyITAGRPFEUR
EnglandENGGRPCEUR
ArgentinaARGGRPBSAM
AlgeriaALGGRPCAFR
MexicoMEXGRPAAME
SerbiaSERGRPDEUR
South AfricaSAFGRPAAFR


it reads in the table 3 times, once pairing team and TNAME, then team and GROUP then team and CONT to give a long table with team and CONNECT.

then the access file has this.

USERIDPASSWORDACCESSCONNECT
sblatterfifaUserALL
mplatinififaUserEUR
bbradleyfifaUserUSA
mlippififaUserITA
nmandelafifaUserAFR
fcapellofifaUserENG


strict exclusion is off so sblatter has access to all but this could be replaced with * if strict exclusion is required.

as i mentioned it is not quite heirarchial as i had suggested but any property can be applied to it.

dont reload it as it reads in the access and reduction documents from an excel file.

View solution in original post

2 Replies
Not applicable
Author

i managed to get it working! yay me!

i've attached an example.

its a world cup thing i had created but now with data reduction dependant on country, group and continent. these fields dont have to be heirarchial but would work just the same if they were.

ok, try logging in as the following users: sblatter, mlippi, fcapello, nmandela, hwebb, mplatini. password for all is 'fifa' as is the pword for hidden script.

heres part of the section access file

TeamTNAMEGROUPCONT
USAUSAGRPCAME
ItalyITAGRPFEUR
EnglandENGGRPCEUR
ArgentinaARGGRPBSAM
AlgeriaALGGRPCAFR
MexicoMEXGRPAAME
SerbiaSERGRPDEUR
South AfricaSAFGRPAAFR


it reads in the table 3 times, once pairing team and TNAME, then team and GROUP then team and CONT to give a long table with team and CONNECT.

then the access file has this.

USERIDPASSWORDACCESSCONNECT
sblatterfifaUserALL
mplatinififaUserEUR
bbradleyfifaUserUSA
mlippififaUserITA
nmandelafifaUserAFR
fcapellofifaUserENG


strict exclusion is off so sblatter has access to all but this could be replaced with * if strict exclusion is required.

as i mentioned it is not quite heirarchial as i had suggested but any property can be applied to it.

dont reload it as it reads in the access and reduction documents from an excel file.

Not applicable
Author

Hello Sanchez10,

I am having the same situation as you.

Please could you copy the script? I am using the demo and I can not acces to your file.

Thanks a lot!!

Alejandro