Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Qlik GA: Multivariate Time Series in Qlik Predict: Get Details
cancel
Showing results for 
Search instead for 
Did you mean: 
brf10043
Creator
Creator

Section Access and the QMC

I have a QVW with Section access that determines which Sheets are visible based on which Active Directory Group a user is in.

Here's my Code


Section Access;

LOAD * INLINE [

ACCESS, NTNAME, GROUP
ADMIN, WMSERVICE\OAX65894, ALL
ADMIN, WMSERVICE\OAX33106, ALL
ADMIN, WMSERVICE\OAX48771, ALL
ADMIN, WMSERVICE\OAX91092, ALL
ADMIN, WMSERVICE\BRF10043N, ALL
ADMIN, WMSERVICE\SG-Orion_Admin, ALL
USER, WMSERVICE\SG-IRIS-AVIP, GROUP1
USER, WMSERVICE\SG-Orion_Access, GROUP2
USER, WMSERVICE\SG-AVIP-SummaryView, GROUP2
]
;


Section Application;

SheetAccess:

LOAD * INLINE [

GROUP, SH03, SH01
ALL, 1, 1
GROUP1, 1, 1
GROUP2, 1, 0 
]
;

This works fine when I manually reload.  However, when I Reload and distribute via the QMC, people loose their access.  What am I missing?

Is there something I need to set up in the Reload and Distribute task?

4 Replies
martinpohl
Partner - Master
Partner - Master

Hello,

for qlikview service user I give a star (*) in the value list in section access, not ALL

Regards

brf10043
Creator
Creator
Author

I don't think the issue is necessarily with the All group.  Everyone has their correct access until the Reload and distribute happens on the QMC.  Once it runs, people in Group1 and Group 2 lose their access.  It seems as if there is an additional step in the QMC task that I need to set up.

 

Peter_Cammaert
Partner - Champion III
Partner - Champion III

What do you mean with "Lose their access..."? No sheets are shown? No data is available? Getting "Access Denied" instead of an open document?

To let this code grant access to specific sheets, I guess you enabled "Initial Data Reduction...". Is there any other connection in your data model to the GROUP field in table SheetAccess? Initial Data Reduction will reduce away all data that isn't connected

There is no difference between reloading in QV Desktop and under QDS control. The two have a different way of opening (and granting access to) documents however: QV Desktop (and QVB.exe) respect the ADMIN Role, while the AccessPoint treats everyone as a USER. Also, QV Desktop only does a reload and doesn't distribute documents. The QDS does distribute. If you are using a full Puiblisher, how did you configure your distribute step?

Peter

CarlosAMonroy
Creator III
Creator III

Hi,

Hope this helps.

Do not forget to add show condition in each tab as =SH01 or =SH02 or =SH03 and to check the box in Document Settings to restrict data by Section Access.

Carlos