Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hello! I am working with a simple implementation of the Section Access functionality, but once I reload the data, the functionality appears to be removed, only allowing a user defined to see everything (*) to see NONCONFIDENTIAL data. My goal is to allow some users to see only data flagged as NONCONFIDENTIAL and other users to see everything.
I have also turned on the Settings --> Document Properties --> Opening --> Initial Data Reduction Based on Section Access
I am using an ADMIN access profile to test this, but my expectation is that the Section Access rules should apply to all users. Is this correct?
Here is the script code I am using:
Section Access;
LOAD * INLINE [
ACCESS, NTNAME, INCLUDED
ADMIN, SA\abrxyz, *
ADMIN, SA\cvrxyz, NONCONFIDENTIAL
USER, QV\JLxxxx, *
USER, QV\SBxxxx, NONCONFIDENTIAL
];
Section Application;
If the field INCLUDED has other values apart from NONCONFIDENTIAL then these must be added to the section access list.
In section access "*" does not mean all values, it means all listed values.
Try this - the DUMMY values will allow * to see NONCONFIDENTIAL, CONFIDENTIAL and SECRET values.
Section Access;
LOAD * INLINE [
ACCESS, NTNAME, INCLUDED
ADMIN, SA\abrxyz, *
ADMIN, SA\cvrxyz, NONCONFIDENTIAL
DUMMY, DUMMY, CONFIDENTIAL
DUMMY, DUMMY, SECRET
USER, QV\JLxxxx, *
USER, QV\SBxxxx, NONCONFIDENTIAL
];
Section Application;
yes it will apply to admin too
If the field INCLUDED has other values apart from NONCONFIDENTIAL then these must be added to the section access list.
In section access "*" does not mean all values, it means all listed values.
Try this - the DUMMY values will allow * to see NONCONFIDENTIAL, CONFIDENTIAL and SECRET values.
Section Access;
LOAD * INLINE [
ACCESS, NTNAME, INCLUDED
ADMIN, SA\abrxyz, *
ADMIN, SA\cvrxyz, NONCONFIDENTIAL
DUMMY, DUMMY, CONFIDENTIAL
DUMMY, DUMMY, SECRET
USER, QV\JLxxxx, *
USER, QV\SBxxxx, NONCONFIDENTIAL
];
Section Application;
Thanks very much for your reply! I can't seem to figure out why then if I set my profile to have full access (*) it still filters automatically on the NONCONFIDENTIAL data. Is there another configuration step I am missing?
As Colin said instead of *, add all the distinct values
Outstanding!! That was it! Thanks very much for your assistance!