With this code, any person has user rights only when opening the qvw file, this hidden script is in. Now I'm searching for a macro I can use with a button object to trigger the login form, so the admin user can log in.
Is there such a macro or is there a better way to protect qvw files without forcing the regular user to use login and password but still giving the admin the possibility to alter the qvw when necessary?
As you say, every user that accesses the document gets 'USER' access. This is because the '*' means any value and so no challenges are issued.
If the documents are server based, I would recommend you use NT authentication to control things and not worry about userid/password challenges. There is a Qlikview document 'Data Protection and Security' that explains this quite well.
That's actually what I've already tried. But I'd like to have the opportunity to do some on-site support without the need of using a certain installation/licence of QlikView. That's why I'd like to have something like an "admin login on demand".
@Gordon: thank you, too! But unfortunately, we don't have the server based solution, yet.
We have exactly the same problem, too bad I never found any good solution like the one you are suggesting (on demand login).
At this moment I have a build in condition in my reload script that looks if a certain file exists in the same folder, if that file exists in the same map no section access is loaded resulting in admin rights for everyone. I just create this file myself and run a new reload and save the document. When I open the document again I have admin access. After my work I remove the created file and reload and save the application again.
It works but I would also prefer a better solution.
normally the NT-User should do it but you need to explicitly assign the rights (USER or ADMIN) to each person. Alternatively you may simply define two groups with different logins: USERs / ADMIN.
The more elegant solution would be to assign different serial-numbers to the USERs, which then have to authenticate and the ADMINS, which do not need.
