Security implementation for QlickView reports

[#1]

Hi All,

Am new to QlickView and I have the requirement to implement security for a report in QV.

This is something like the security needs to be implemented data wise and role wise.

I mean to say if in my report i have data for north,south, east and west, then the east manager should be able to view only the east region data and he should not view the data of other regions.

Hope am clear to all.

Any help will be appreciated.

Thanks in advance,

Mahasweta

[#2 · Accepted solution]

You will need to implement section access.

With section access you can define rights based on the users opening the application.

Thes reights will work in the entire application and in the report. Please have a look at Qlikview manual.

[Gustav_Guldberg]

Hi Mahasweta,

A very simple code example below:

Section Access;
LOAD * INLINE [
 ACCESS, USERID, REDUCTION
 ADMIN, ADMIN,
 USER, ManEast, EAST
 USER, ManWest, WEST
 USER, ManNorth, NORTH
 USER, ManSouth, SOUTH
];
//There's a difference between " " and "*".
//In short " " is "every value in the field" where "*" is everything listed for that field.

Section Application;
LOAD * INLINE [
 REDUCTION, FIELD_USED_AS_LINK_TO_YOUR_DATA_STRUCTURE
 EAST, REGIONEAST
 WEST, REGIONWEST
 NORTH, REGIONNORTH
 SOUTH, REGINSOUTH
];

Regards,

Gustav

[#4]

Load the access details like ADMIN or User and also the Role.After this load the role detials in the sectiion application and link to object corresponds to the Role to your data model.

Don't forget to check the option "Intial data reduction Based on the Selection" in the document properties(In opening tab)

[#5]

Hi All,

Thanks a ton for the replies.

Yes i have used the section access,but still i have some doubt.

After setting the user name and password , the qvw file can be opened by the user and the user can view the script as well.

So now the user can change the password also, then how the security will be maintained?

Is there any other way to secure the document, so that the user only can view the document but he should not change any thing?

Or am missing something in the implementation?

Please guide me.

Thanks,

Mahasweta

[#6]

No user won't see the code until and unless you share the Secured Password.

[Gustav_Guldberg]

Mahasweta,

I would do a couple of things:

1. Put "Section Access;" into the hidden script, thus password protected even for ADMIN

2. Under "Security" on document level, change the permissions so that USER cannot edit script, reload and so forth.

3. Under "Opening", prohibit binary reload and enable "reduction based on SA" and "Strict Exclusion"

Regards,

Gustav

[#8]

Hi Gustav,

Thanks a ton for your help.

1- Could you please let me know How to put the "Section access" into the hidden script.? As the same is disable for me when am seeing the same from edit script menu.

2- Yes i have checked the security on document level. But now even if am opening the file with Admin access username then it should allow me to reload or not? As its asking me admin access required for reload.

3- Under opening tab, when am checking for initial data reduction then the document itself is not opening and giving the message like "This document c:\demand.qvw failed to load"

Could you please let me know is there any specific admin rights or am missing something?

Please help me out.

Thanks,

Mahasweta

[#9]

Hi Ram,

Thanks a ton..

As you said :

Load the access details like ADMIN or User and also the Role.After this load the role detials in the sectiion application and link to object corresponds to the Role to your data model.

Don't forget to check the option "Intial data reduction Based on the Selection" in the document properties(In opening tab)

Here even though i have created the access for user and admin and am trying to open the file with admin access, then also by checking the initial data reduction ,am getting some warning message like "This document c:\demand.qvw failed to load". So am not able to open the document itself.

Could you please let me know where am missing ?

Thanks ,

Mahasweta