I have exact same problem... we need to expose few charts/pivots from our QlikView based application to other web applications within the company. It is not possible to identify all the incoming users and set their security through section access. The client web app will call our QlikView app via http:// and by passing selection parameters. (We still havent decided whether we will use QlikX or ZFC or IE plugin) During onload, selection parameters will be applied on our qlikview app and there should not be any way to clear those out for the end user. Tried exploring UserPreferences api but that doesnt seem to work using IE plugin. Can someone please help?