Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Join us in NYC Sept 4th for Qlik's AI Reality Tour! Register Now
cancel
Showing results for 
Search instead for 
Did you mean: 
sampada0810
Creator
Creator

Data reduction

I am implementing security in m application.

I want to restrict data for certain users.

how can I achieve this?

i have written my script as follows:

Section Access;

LOAD * INLINE [

    ACCESS, USERID, PASSWORD, GEOGRAPHY

    A, A, A, ALL,

    U1, U1, U1, "Abc"

    U2, U2, U2, "Xyz"

    U3, U3, U3,  ALL

];

Section Application;

I want to restrict the field GEOGRAPHY, i.e foe U1 only "Abc" data should be visible

and for U2 only "Xyz" data should be visible.

I have also checked Initial Data reduction based on section access.

I am unable to login with this script in place.

what shall I do???

8 Replies
sushil353
Master II
Master II

Hi,

Check this out: https://community.qlik.com/docs/DOC-5917

HTH

Sushil

jonathandienst
Partner - Champion III
Partner - Champion III

If Abc and Xyz are the only possible values of Geography, then this should work:

Section Access;

LOAD * INLINE [

    ACCESS, USERID, PASSWORD, GEOGRAPHY

    ADMIN, A, A, *

    USER, U1, U1, Abc

    USER, U2, U2, Xyz

    USER, U3, U3, *

];

Section Application;

The * references only the values listed elsewhere in the Section Access table load. Make sure that you have a field in the main model called GEOGRAPHY (case is significant), and that at least some of the values under GEOGRAPHY in the section access table exist in the main model GEOGRAPHY field.

Logic will get you from a to b. Imagination will take you everywhere. - A Einstein
sampada0810
Creator
Creator
Author

I did the same, still getting error.

Access denied!

Actually I have many other values also in my GEOGRAPHY Column.

But I want to restrict at least for 2.

rajpreeths
Creator
Creator

Hello Sampada,

I have tried with the sample data . Section access is working fine for me. Below is the script I created .

Section Access;

LOAD * INLINE [

    ACCESS, USERID, GEOGRAPHY

    ADMIN, ADMIN                                     /* For all possible values leave this column data as emptied one (no letters) */

    USER, user1, ABC

    USER, user2, XYZ

];

Section Application;

/** LOAD the REDUCTION  field in uppercase in the SEction Application part */

/** In this casse reduction field is GEOGRAPHY **/

LOAD * INLINE [

    GEOGRAPHY

    XYZ

    ABC

    A

    B

    C

    D

    E

    F

];

Note :

1-> If you are fetching reduction field data from source or excel or text files then the field name and values to be restricted to the users should be in upper case (use upper function).If values are not in upper case then section access will not be working fine.

2-> For inline load , section access will be working fine even if we don't have the values in upper case. In the above case reduction field ( GEOGRAPHY) has been loaded using Inline load.If you fetch this field from external file then definitely the field should be loaded with UPPER function - upper(GEOGRAPHY) as GEOGRAPHY in section application part .

3-> Ensure to check the below option under Settings->Document Properties -> Opening


section access.PNG




PFA the attachment for further reference.


U can just open the document by simply giving username alone.

ADMIN for ADMIN

USER1 for ABC data

USER2 for XYZ data


Please feel free to ask if you have any queries.


Thanks,

Rajpreeth S

fvelascog72
Partner - Specialist
Partner - Specialist

Hi,

You can try with this:

Section Access;

LOAD * INLINE [

    ACCESS, USERID, PASSWORD, GEOGRAPHY

    ADMIN, A, A, *

    USER, U1, U1, "ABC"

    USER, U2, U2, "XYZ"

    USER, U3, U3,  *

];

Tabla:

LOAD * Inline [

GEOGRAPHY

ABC

XYZ

RST

UVW

];

Section Application;

Tabla:

LOAD * Inline [

GEOGRAPHY

ABC

XYZ

RST

UVW

];

You must have inside Section Access all values of the field GEOGRAPHY in Uppercase.

Cheers.

Anonymous
Not applicable

Is interesting vc have an excel to access restrictions.
in its action session.

LOAD * INLINE [
    ACCESS, USERID, PASSWORD, PK_ACESS
    ADMIN, A, A, *
    USER, U1, U1, 1
    USER, U2, U2, 2
    USER, U3, U3 *
];

IN EXCEL FILE CREATE TWO COLUMNS (PK_ACESS AND GEOGRAPHY).


Acess.png
Recalling that the geography field is key sensitive, with the information from your QVD

Peter_Cammaert
Partner - Champion III
Partner - Champion III

Indeed, all values in Link Fields including the names of the fields themselves should be in UPPER CASE. Otherwise, there will not be a single value that links to the data model, and your document will reduce to nothing for all USERIDs. If "Strict Exclusion" has been enabled, you will effectively shut everybody out...

punitpopli
Specialist
Specialist

Hi Sampada,

For section access the column on which you are reducing must be in CAPS and same values should be mapped in section access script

for eg : IN SECTION ACCESS script

GEOGRAPHY

ABC

XYZ

and for ALL you can keep it blank


IN Data if the values of geography column in in lower case then change it to :

UPPER (geography ) as GEOGRAPHY

Hope this will help!