Sheet level Section access issue with NTNAME works on Desktop but not in Access Point

[chaper]

I am trying to implement Sheet level section access based on NTNAME(upper case) as below.I have conditions  as if(Sheet1=1,1,0) and if(Sheet2=1,1,0) on both sheets.It works great in desktop.But when it is published to Server , I can see the application but if I try to open it say "failed to open or don't have to access".I don't know may be the NTNAME on AccessPoint in lower case compared to on desktop?Need help to fix this. swuehl‌ hic marcus_sommer

jagan‌   Thanks

Section Access;

LOAD ACCESS,

         NTNAME

FROM Table QlikSection Access;

Section application;

[Sheet Level]:

LOAD

     NTNAME,

     SHEET1,

     SHEET2;

FROM Table QlikSection Access;

[chaper]

Thanks for reply.I added myself as user in SA table ,reloaded and saved.I am still able to open the app.I added all service accounts from DEV/PROD as ADMIN in SA table.I am not sure what and where I am doing wrong?

Thanks

[#3]

How is the service account set up in your script? You should set its sheet values with '*' so it has access to all values. And uncheck strict exclusion for now.

So... Admin | DOMAIN\ABC | * | *

[chaper]

I removed only strict exclusion ,reloaded and in Access Point I can see and open app.I added OS user and NTNAME fields in one tab to see how values getting in Server.OSuser shows my name but in NTNAME i see server account.So is this right or I should see both NTNAME and OSuser as myname?

Thanks.

[krishnacbe]

Hi,

Great you were able to open the dashboard in access point.

Not sure why the NTNAME & OSUSER are different. As of my knowledge it should be same.

[chaper]

Thanks.But still issue exists why my NTNAME is not showing.

[krishnacbe]

For more details on Strict Exclusion refer to below link. Your login is exclusion and you were able to view the dashboard.

Section Access: Strict Exclusion

[swuehl · Accepted solution]

Don't use NTNAME as reduction field.

This will limit the reduction field to the user that does the reload & save.

Use a distinct field for reduction (you know, don't forget upper case) and use star symbol in that field for the service user.

Something like

Section Access;

LOAD ACCESS,

         NTNAME,

         SHEETACCESS

FROM Table QlikSection Access;

Section application;

[Sheet Level]:

LOAD

     SHEETACCESS,

     SHEET1,

     SHEET2

FROM Table QlikSection Access;

with a table

SHEETACCESS, SHEET1, SHEET2

A, 1,1

B, 0,1

and a SA table

ACCESS, NTNAME, SHEETACCESS

ADMIN, SERVICEUSER, *

ADMIN, USERA, A

USER, USERB, B

[Peter_Cammaert]

If appears that the only SA entry that is available is the one for the service account. Which means that somehow data reduction has been applied to an existing document and that situation has been saved. You open that document version in the AP. QVS finds no entry for your account, but since Strict Exclusion has been disabled, the service will let you in and grant you access to all data. Which apparently boils down to a single "wrong" NTNAME value...

Since the service account is doing the QDS reloads, how is it being defined in Section Access? Does it have blank field values for everything except ACCES and NTNAME? If not, make sure that for the service account entry, no values are present in the link fields, save and reload. With Strict Exclusion disabled, NTNAME should now contain a lot of values, and IMHO yours should be amongst them...

[Peter_Cammaert]

That's weird. It does work for me, using NTNAME as a link field.

Moreover, a reload after data reduction (only applied when QVB.exe opens the document) always restores the Section Access table to its full glory.

[swuehl]

Peter, I was assuming that the Sheet Level table gets reduced. I don't think the resident tables get restored, do they?