Using NTName in section access

[sangland2]

I have a simple requirement to reduce data for sales reps to see their own sales. I have this script:

SECTION ACCESS;

LOAD Access as ACCESS,

     NTNAME as USERID,

     SalesRep as [Sales Rep]

  FROM

(ooxml, embedded labels, table is NTName);

Access	NTNAME	SalesRep
USER	USER	*
ADMIN	Domain\Administrators	*
ADMIN	Domain\testuser	*
USER	SC	SC
DUMMY	DUMMY	SC
DUMMY	DUMMY	ST
DUMMY	DUMMY	SW

This works well in both website and desktop access once the document  is open.

I am authenticated on the browser and logged into the access point as DOMAIN\testuser.

Q1: When opening the model from the access point I am asked to login again (see below). Is this necessary having been authenticated on the access point.?

Q2: No password is used, because I don't know them and the NTNAME should be sufficient, is it not ? The login does not require a password to be entered.

Q3: Why does SC work when it is not an domain account ?. With no password this is not secure.

I am not using a password, so this post about the same problem didn't help Webticket not passing user credentials to QVW

Need SSO to work as well as section access based on domain login. Currently anyone can get into the document if the know a domain user name.

Using the IE plugin

Thanks

[marcus_sommer · Accepted solution]

The reason is you didn't used NTNAME because you renamed it to USERID. Both are system-fields for qv - have a look here: http://community.qlik.com/docs/DOC-1853

- Marcus

[sangland2]

Thanks Marcus. One more question. Is it really necessary to specify every possible value of SalesRep with a DUMMY row so that the "*" works for testuser? I guess I can read the unique sales reps out of the source database for the model to populate section access.

[marcus_sommer]

It should be work without DUMMY values for each possible value, only with "*". Maybe you need a statement like:

star is *;

- Marcus

[sangland2]

"*" only seems gives you access to other values in the column. Not sure what "star is *;" means. It was no problem to go to the database to get all possible values for DUMMY records, but its counter intuitive. Thanks for your help.

[sangland2]

http://www.citagus.com/citagus/blog/field-reduction-using-section-access-in-qlikview/

Found the answer here, use a blank if you want all values on the data model, use a "*" if you want  all the other values listed in section.