Restricting access to a report

[#1]

Hi

I have a report that I have used Section Access and a spreadsheet with usernames and passwords to restrict access. This part of the process works fine in that you need to enter a username and password to open the report in the web browser or the client application. My issue lies in the QMC when my reloads take place. All my reports reload apart from the one that has the security restrictions using Section Access. I have made sure my admin username and password is on the spreadsheet but that still does not make it work. Is there something I have missed?

I have attached a copy of the log file as best I could as I cannot seem to be able to just copy and paste the whole log file.

Thanks

Steve

[#2]

Hi

I have tried various different options within my spreadsheet but it is still failing to reload. Like I said the security works on the document just not on the reload.

example spreadsheet below:

Thanks Steve

[awhitfield]

What's in the section access part of your script?

Andy

[Peter_Cammaert · Accepted solution]

Ah, now we got something.

Drop the password field, and rename USERID into NTNAME. That should do the trick.

Peter

[Peter_Cammaert]

Or if you hold on to the non-SingleSignOn way of granting access (we're all Windows users, so Windows already knows who we are - you seem to supply a domain name for all UserIDs), enter the credentials of one of the admin accounts in the section access fields at the bottom of the Reload tab in QMC (No Publisher) or in the Data Protection area of the Task Reload tab (if you've got a Publisher)

Best,

Peter

[awhitfield]

Agree with the above, USERID is not the same as the USERNAME, using NTNAME instead with all of them in upper case, will mean your logon credentials will be used to access the qvw rather than having to enter a user name and password etc.

Andy

[Peter_Cammaert]

And a little explanation: USERID and PASSWORD fields make the server always produce a login page where you can enter the correct credentials. The reload engine however is nothing more than a stripped QV Desktop without a user interface: a black box without arms or legs. The reload engine has no means whatsoever to ask you for a username or a password. However, QlikView server can pass these credentials as parameters to the engine during startup, on condition that you supply the correct values in those QMC fields.

I still think the NTNAME approach will suit you better.

Best,

Peter

[awhitfield]

Hi Steve, if you do want to do it the original way, you can enter one of the already created user details here on the reload tab of your document 🙂

Andy

[#9]

Hi Both

I tried as you have said. My spreadsheet now looks like this:

And the reload page for the report on QMC looks like this:

I tried it with TSL\ in front of the username but that failed too. Should I be using the QVSERVICE username for this? The ATLAS login has admin rights as this is the login that the QMC was installed under.

Thanks Steve

[awhitfield]

You don't need that bit if you have changed it to NTNAME, just reload manually etc then try the QMC. Just a thought, is the QVSERVICE account actually a domain account OR a local server account? If it's local you don't need the TSL prefix

Andy

[Peter_Cammaert]

Maybe it's time to start over again. You do have an original version of your document without Section Access, don't you? Make a copy of that original (call it "... - SECURED.qvw" or something), add or enable SA in your script, reload in the desktop with the most recent version of the Excel and store in the server document root. Then let the server perform a reload on its own.

IMHO the SA data in the current document may have been messed up too much already...

Best,

Peter