Section script meaning

[vijaysahu2]

Section Access;

Load 'USER' As ACCESS,

             '*' AS NTNAME,

            '* 'AS EMPLOYEE ID

autogenerate 1;

Section application;

I have above load statement in my section access ..what two  *  tells. There are other statement was before this load which I understood what they are doing but this is confusing me.

[simospa]

Hi Vijay,

this script seems to add a single row of Section Access     

ACCESS	EMPLOYEEID	NTNAME
USER	*	*

About the meaning, this part of script provide access for profile USER (profiles are ADMIN or USER) to all [EMPLOYEE ID] and all NTNAME specified in other parts of your script. This part of script provide access to all NTNAME and EMPLOYEE ID already declared in the section access.

For example, if you have only this two rows

ACCESS	EMPLOYEEID	NTNAME
USER	*	*
ADMIN	JACK SPARROW	domain\jsparrow

it means that user with admin profile jsparrow has a USER profile too.

But note that if in your AD there is a user called JAMES BOND, domain\jbond, he cannot has access to QV Document because the wild card works only for info explicited for that column.

It could be useful to see the other part of script to better understand.

Bye.

Simone

[Peter_Cammaert]

It probably means that all Windows accounts have access as Role=USER to everything field [Employee ID] links to.

[Peter_Cammaert]

I don't think that is true (about the wildcards in field NTNAME). For NTNAME and related fields, they behave differently.

[simospa]

Peter,

I cannot do anything but trust in you

I never tried to apply wildcards on "system" fields of section access.

A simple test that vijay could do could be try to access with a user with NTNAME not in the list of explicit values.

Sorry if my answer was not correct

Simonoe

[Peter_Cammaert]

No problem and no need to apologize. I make mistakes too. All the time

There is a nice technique to completely lock down a document for public distribution. Only specific accounts should be able to *open the script editor, *change sheets/objects, etc. It works with only few SectionAccess entries, like:

ACCESS,   NTNAME

ADMIN,    Domain\Username

USER,     *

Everyone will have access with Role=USER, except for the listed account who will be ADMIN and able to do *advanced* things. The star will match any account that isn't found in the NTNAME field...

[vijaysahu2]

Hi Simone/ Peter

Below is the full script in section access

Section Access;

LOAD 'USER' As USER,

           'AUD\' & MANAGER_ID As NTNAME,

            EMP_ID

Resident usernames;

Concatenate

LOAD ' ADMIN' As ACCESS,

             'AUD\VIJ123' As NTNAME,

             '*' As  EMP_ID

        Autogenerate 1;

Concatenate

LOAD ' ADMIN' As ACCESS,

             'AUD\QLIK_ADMIN' As NTNAME,

             '*' As  EMP_ID

        Autogenerate 1;

Concatenate

LOAD ' USER' As ACCESS,

             '*'  As NTNAME,

             '*' As  EMP_ID

        Autogenerate 1;

Section Application;

Drop table usernames;