Solved: Re: Section Access - Qlik Community

Report Inappropriate Content · ‎2015-07-21

Hi,

i am new to Qlikview and trying to implement section access, i want to restrict data by Division(Field DIV) in my document. i have created NT section access, looks like its working but i noticed some data missing when i open the document from Access point. i was able to see that data if i open the document in personal edition. can someone please let me know if i'm doing something wrong in here.

Section Access;

LOAD * INLINE [

ACCESS, NTNAME , DIV

ADMIN, PANTHER\HARISHB, NE

ADMIN, PANTHER\HARISHB, SE

ADMIN, PANTHER\HARISHB, W

ADMIN, PANTHER\BENHAN, NE

ADMIN, PANTHER\JOEMAN, NE

ADMIN, PANTHER\QLIK00.SERVICE, *

USER, PANTHER\JIMMYK, NE

];

Section Application;

SalesmanDimension:

LOAD

DIV

FROM

$(vPath)SalesmanDimension.qvd

(qvd);

Below is the actual table that has DIV field.

SalesmanDimension:

LOAD

ACCT_NO AS SalesCode,

FIRST,

LAST,

Name,

MI,

DIV,

Email,

REGION_MGR,

UserName,

ACCT_NO & ' - ' & Name AS SalesName

FROM

$(vPath)SalesmanDimension.qvd

(qvd);

Anonymous · ‎2015-07-21

Same Situation happened to me as well. In your Division field from your data model has data like ( East , West , North , South) and in your AUTH sheet or Inline table you have enabled only 3 divisions for the users or Admins like (East, West, North).. Even though you mention * for some of the users you will still miss the data for the South after saving the qlikview document.

Example of above scenario,

LOAD * INLINE [

ACCESS, NTNAME , DIV

ADMIN, PANTHER\HARISHB, East

ADMIN, PANTHER\HARISHB, West

ADMIN, PANTHER\HARISHB, North

ADMIN, PANTHER\BENHAN, East

ADMIN, PANTHER\JOEMAN, North

ADMIN, PANTHER\QLIK00.SERVICE, *

USER, PANTHER\JIMMYK, West

];

Division:

LOAD * INLINE [

DIV

East,

West,

North,

South

];

--------- in this above scenario you will still miss South Division data for the ADMIN QLIK00.SERVICE even though he has *

This is normal behavoiour of qlikview.. And to over come this issue for ADMIN QLIK00.SERVICE for division give blank space. then that user can see all the data.And make sure strict exclusion is removed when setting up field level or row level security.

Let me know if this helps or i can provide an example with the script

View solution in original post

awhitfield · ‎2015-07-21

Hi Harry,

you need to add the QV SERVICE account to you list of users

Andy

Kushal_Chawda · ‎2015-07-21

From which user you logged on?

awhitfield · ‎2015-07-21

Actually, just spotted ADMIN, PANTHER\QLIK00.SERVICE, which I presume IS the service account, remove the * (this means 'all listed' NOT all) and then reload.

Andy

Report Inappropriate Content · ‎2015-07-21

Thanks, Andrew! service account will not be in SalesmanDimension(Where i'm getting the DIV). Do i need to create one more user table and assign Divisions?

jfkinspari · ‎2015-07-21

Note that the * in the Section Access script

Section Access;

LOAD * INLINE [

ACCESS, NTNAME , DIV

ADMIN, PANTHER\HARISHB, NE

ADMIN, PANTHER\HARISHB, SE

ADMIN, PANTHER\HARISHB, W

ADMIN, PANTHER\BENHAN, NE

ADMIN, PANTHER\JOEMAN, NE

ADMIN, PANTHER\QLIK00.SERVICE, *

USER, PANTHER\JIMMYK, NE

];

Does not mean all data, but more all listed values (NE, SE, W).

In case that's all the data you see, you are probably opening the document using the service user, or the document has been reloaded using the service user

Report Inappropriate Content · ‎2015-07-21

i'm reloading this from server, Service account is used when i'm doing on server. i'm opening the document as HARISHB from Access point.

Report Inappropriate Content · ‎2015-07-21

Yes, that is the service account. you want me to keep the DIV blank for QLIK00.SERVICE user?

jfkinspari · ‎2015-07-21

I'm not completely sure, but if you remove the value, and Strict Exclusion is activated, I don't think you'll have access to the document at all

Kushal_Chawda · ‎2015-07-21

So are you able to see NE, SE and W for this user? or what is visible?