section access

[heimo_ernst_wei]

I 've created a "section access".

Now I get a somehow "strange" behaviour, but I did not find what my error is:

Fields are: ACCESS, GRUPPE, NTSID, SALESMAN, SYSTEM

• In case I have for ACCESS USER and a valid value for SALESMAN the user defined by NTSID is able to open the file (and the restriction apply accordingly)
• In case I have for ACCESS USER and a no value for SALESMAN (this means NULL) the user defined by NTSID is NOT able to open the file
• In case I have for ACCESS ADMIN and a no value for SALESMAN (this means NULL) the user defined by NTSID is able to open the file

The purpos is to allow a sales-person to see only data linked to his customers whlie other users sahll see all customers (respectively "all" data)

I 've tried it with a * in the field SALESMAN as well as with the first character of teh relvant value and a * but this did not help either.

I would be gald for any idea how to solve the problem.

Heimo

[#2]

Pl Refer http://community.qlik.com/qlikviews/1116

[heimo_ernst_wei]

Thank you for your proposal

However I am not generating my list via "inline" I do an import from SQL-database

Formula:  UPPER(If (Gruppe = 'SALES',"Test",))as SALESMAN;

But.:

UPPER(If (Gruppe = 'SALES',"Test",*))as SALESMAN;

does not work and

UPPER(If (Gruppe = 'SALES',"Test",'*'))as SALESMAN;

neither

Regards Heimo

[#4]

If you upload sample application, that will be great..

Using "*" in section access doesn't mean "all values for field" but "all listed values for field within section access". If you want a user to get all information, set nothing instead the asterisk for any admin user, and as many lines as possible values for each user.

Hope that helps

Also i will suggest store section access data into the Qvd and then load into application. Use NTID not NSTID.

[heimo_ernst_wei]

Thanks for your answer.

I know the selection coming from using * however I wanted to test if they can open the file then at least.

I do not have a *.qvd

I have tried the same approach with NTNAME but there is no difference.

The code which I am using is simple:

Section access;

SET vCatalog = 'cee_datawarehouse';

CONNECT TO [Provider=SQLOLEDB.xxxx);

STAR is *;

Load

UPPER("Access") as ACCESS,

UPPER("SID") as NTSID,

UPPER("System") as SYSTEM,

UPPER("Gruppe") as GRUPPE,

UPPER(If (Gruppe = 'SALES',"rp_id_m",))as SALESMAN;

SQL SELECT * FROM "cee_datawarehouse".dbo."QlikViewProperties";


Section application;

....

The result is then (if put the same Load-statement in the Section application):

ACCESS

GRUPPE

NTSID

SALESMAN

SYSTEM

USER	POLENGF	S-1-5-21-xxx-123		AT
USER	SALES	S-1-5-21-xxx-124	AT94	DE

ADMIN

GF

S-1-5-21-xxx-125

AT

The user S-1-5-21-xxx-123 cannot open the file

The user S-1-5-21-xxx-124  is able to open the file and gets the right data-set.

The user (admin) S-1-5-21-125 is able to open the file and gets the full data-set

Heimo

[heimo_ernst_wei · Accepted solution]

I found the solution:

in Document Properties / Opening "strict exclusion" was selected - this leds to the behavior as described above.