Distributing a document with Section Access

[jfkinspari]

I've a issue distributing a document that contains Section Access using Publisher. The distributed document can only be accessed by users having the same access rights as Publishers' service user.

The Section Access is structured as in below example.

Section Access;

LOAD * INLINE [

    ACCESS, NTNAME, ROLE

    Admin, QVService, ALL

    user, NTNAME1, DK

    user, NTNAME2, NO

    user, NTNAME3, SE

];

Section Application;

Star is *;

UserAccess:

LOAD * INLINE [

    ROLE, CompanyID

    ALL, *

    DK, 1

    NO, 2

    SE, 3

    FI, 4

];

The QVService user can access all data. If the document is only reloaded, everything works fine. However, when the document is distributed to either QlikView Server or Folder, the UserAccess table is reduced to only contain a single row

ROLE	CompanyID
ALL	TOTAL

Whenever a user, who does not belong to the Role ALL, now tries to open the document, access is denied.

The document has enabled 'Initial Data reduction based on Section Access' and 'Strict Exclusion'.

How would you suggest overcoming the issue? For me it seems that Publisher and Section Access does work very well together!

[#2]

Are you sure the user's NTNAME is properly defined in section access?

The login user id and the NTNAME1 defined should match with each other.

Regards,

Prabhu

[jfkinspari]

Yes, of that I'm sure.

The access works as planned when opening the document before it's reloaded. It's more that the document is distributed after the document has been reduced to only contain the Service Users Role.

[#4]

May be you debug by removing the Admin Role in Section Access.

If it works fine may be you can create a new grp for Admin users. I am not sure if you can use QV Service Account in section access.

Regards,

Prabhu

[amit_saini]

Jens,

This attachment may help you.

Use Username : admin

       Password : admin

Thanks,

AS

[jfkinspari]

Hi Amit,

In your example the date table is not reduced per user. I would think you miss a reduction field in the Section Access Table.

Or do you think of this as an example, where you don't limit the data, but only hides the object?

[amit_saini]

Yes example for data limit.

Thanks,

AS

[Bill_Britt]

Hi,

Take a look at the attached document.

Section Access;
LOAD * INLINE [
    ACCESS, USERID, GROUP
    ADMIN, administrator, AGRP
    ADMIN, bob, CGRP
    ADMIN, test, BGRP
    ADMIN, mss, BGRP
];
Section Application;

star is *;

LOAD * INLINE [
    GROUP, Country
    AGRP, *
    BGRP, USA
    CGRP, Canada
    CGRP, France
  ];