Qlik Community

QlikView Deployment

Discussion Board for collaboration related to QlikView Deployment.

Not applicable

Qlikview Application Security

Hi

We have multiple applications in the same folder(root folder), but we want to show some application for some users in accesspoint and others shouldn't view the application in accesspoint. Can we do apply security in app level?

I believe we can do this in adding or removing user group in application properties.

Thanks

Sat

9 Replies
prieper
Honored Contributor II

Re: Qlikview Application Security

Please check SECTION ACCESS.

Users are able to see only those documents, for which they have access.

Peter

satishkurra
Valued Contributor II

Re: Qlikview Application Security

Please check the attached document

Re: Qlikview Application Security

If you don't have Publisher, you can control access by setting the Windows Security permissions on the file. This is sometimes made easier by putting the apps in separate folders so you don't have to worry about file permissions getting overlayed by folder permissions.

-Rob

http://masterssummit.com

http://qlikviewcookbook.com

sfatoux72
Valued Contributor

Re: Qlikview Application Security

Document Level Authorization

Once a user has been authenticated, QlikView Server typically handles authorization on its own. QlikView Server provides the choice between storing the ACL information as Windows NTFS privileges (applicable only when the user is authenticated using a Windows user identity) or by storing the ACL information in the internal repository, Document Metadata Service (DMS), in QlikView. The choice of NTFS or DMS affects the access to all documents in QlikView Server.

NTFS vs. DMS

QlikView Server can use the NTFS privileges of the Windows file system to store authorization information. When in NTFS authorization mode, QlikView Server controls access to a given QlikView document by determining if the authenticated user has NTFS privileges to the underlying QlikView document file (.qvw). This is based on the operating system privileges and Windows NTFS is used for the ACL. The privileges of the authenticated user are configured by a server administrator using standard Windows Explorer functionality via directory properties options.

As an alternative to Windows NTFS, QlikView can use its own ACL, DMS. Unlike NTFS, this allows non-Windows users and groups to be authorized to access applications and data. DMS integrates fully with the existing Directory Service Provider (for example, Active Directory, other LDAP) where Group Membership has been recorded – this is a mechanism by which QlikView Server can re-use existing enterprise accounts and group structures. The permitted users or groups are recorded in a meta file that resides next to the QlikView document, and it is managed using QMC.

NTFS is the default document authorization model, suitable when all users and groups are identified in Active Directory or locally on the QlikView Server host. The NTFS permissions may be inherited from the directory that the QlikView documents are in, or may be assigned using QlikView Publisher distribution tasks.

DMS is required when the authenticated user identity is not a Windows user account. The DMS permissions are explicitly assigned using QMC, or may be assigned using QlikView Publisher distribution tasks.

DMS is only available with QlikView Server Enterprise Edition

Re: Qlikview Application Security

Good point. If you have EE Server, you can use DMS for authorization. Much easier than changing windows permissions, because you can manage it from the QMC.

-Rob

MVP
MVP

Re: Qlikview Application Security

Hi,

Try Section Access for this.  There are lot of examples in Community and in Qlikview help file.

Authentication and Authorization in Qlikview

If you just want user level then use below script

Section Access;

LOAD * INLINE [

    ACCESS, USERID

    ADMIN, Admin

    USER, Sales

    USER, Market

];

Section Application;

Regards,

jagan.

saimahasan
Contributor III

Re: Qlikview Application Security

Yes you can restrict the users with the help of Section Access.

With this respect, only the authorized users will b able to view the apps.

Re: Qlikview Application Security

Hi,

If you do not have Enterprise Edition and if you are having Small Business Edition then you can also use the Windows Setting to restrict use to view applications on accesspoint.

All you have to do is for each of the application, go to properties and remove the Users Group from security and add only users which should have access to that document (Application).

Once you do this, restart Qlik Services to take immediate effect.

Regards,

Kaushik Solanki

Not applicable

Re: Qlikview Application Security


Thank you all for your replies. We will go with section access if we can't do anything on windows level because we are not going to apply the data level security.

We are going to migrate current server to new server with DMS authentication. We will try Sébastien Fatoux recommendation.

Community Browser