Later in my resident tables, I have a few tables with the REGION column in them, but they only have data for AMERICA and ASIA.
When user ABC logs in, he sees data for REGION=AMERICA and ASIA only and everything works fine. However when user XYZ logs in, he is supposed to see data for EUROPE only, but since the other tables have no data for EUROPE, this user is expected to NOT SEE any data in the dashboard. But XYZ is seeing everything (i.e. all rows from every table). I tested with another user DEF who doesn't exist in the Section Access and even he is able to see everything.
Please suggest how to restrict the access for XYZ and DEF in the above example.
Make sure you have a field "ACCESS" that is set to "USER" (in the same table as NTNAME) for the users that should have a restricted view of data.
Make sure "Settings"->"Document properties"->"Opening"->"Inititial data reduction ... " is set. Also, use strict exclusion. (I suspect that Strict Exclusion is missing in your case)
Make sure you have UPPER case in the REGION field. Both in data and in Section Access.
Make sure you have a field "ACCESS" that is set to "USER" (in the same table as NTNAME) for the users that should have a restricted view of data.
Make sure "Settings"->"Document properties"->"Opening"->"Inititial data reduction ... " is set. Also, use strict exclusion. (I suspect that Strict Exclusion is missing in your case)
Make sure you have UPPER case in the REGION field. Both in data and in Section Access.
That XYZ cannot open the document is expected. That is what will happen if there are no records corresponding to the restriction.
If you want the user DEF to see everything, there are the following options:
Make DEF an ADMIN user, and restrict him to something impossible, e.g. a blank space , "UTOPIA" or "ALL COUNTRIES". QlikView will try to make this selection and fail. Then QlikView will check if the user is ADMIN, and if so, open the doc with full data.
Assign a wildcard, * , to the DEF line. Then DEF will see all REGIONS listed in the Section Access table. Problem: REGIONS that exist in data but not in Section Access will be excluded.
Thanks ! The message to XYZ - "Access denied to the document" is misleading...any way for XYZ to be able to open the dashboard but see blank charts/tables ?
There is no setting for this. If there is no data - then you cannot open the file. And that's it.
What you could do, is to have a dummy record for each region. So that you have a record where REGION='Europe' and Country=NULL. Then the user will see the value Europe in the REGION list box, but all other list boxes will be empty.
Everything works fine when opened locally on my machine...however when I copied the qvw to the server and opened it from server with my id (same id opened it fine locally), its prompting for User ID. FYI, I am using NTNAME in the section access and server uses DMS Authorization.
I suspect that it will not work directly with DMS authorization. To make it work, you need to have the web server request a ticket from the QlikView server. The user ID on the ticket will be compared to the NTNAME in Section Access.
.png "Former Employee"){kind=icon}