Restrict data by Domain and Username

[#1]

Imagine my raw data:

Client

A

B
C

D

Imagine I have 2 Windows domains:

AMERICA

EUROPE

1. I want all users in EUROPE to be able to see rows C and D. - Not working

2. I want EUROPE\MIGUEL user too see only row D.

3. I want AMERICA\JIM see rows B,C and D.

What I have so far:

Section Access;

LOAD * INLINE [

    ACCESS, NTNAME

    ADMIN, EUROPE\MIGUEL

    USER, AMERICA\JIM

    USER, EUROPE\ANN

];

Section Application;

load * inline [

NTNAME, CLIENT

EUROPE\MIGUEL, D

AMERICA\JIM, B

AMERICA\JIM, C

AMERICA\JIM, D

];

It does the job except point 1 (I'm not restricting data to ANN and she should be able all see only rows C and D because she is in EUROPE).

Can I add something like

EUROPE\*, C

EUROPE\*, D

to achieve point 1?

[#2 · Accepted solution]

Try this one,

http://community.qlik.com/blogs/qlikviewdesignblog/2012/10/02/complex-authorization

Regards

[#3]

So my solution wouldn't work with EUROPE\*?

It looks like the author of that thread is complicating too much.

Why do I need all of that complication?

[#4]

As far as I know the only way to get more than one field in section access is to create a key that identifies every possible combination and use that key in the reduction field.

No if you dont have too many user in section access you could try something less generic like:

EUROPE\MIGUEL, C

EUROPE\MIGUEL, D