Qlik Community

QlikView Management

Discussion Board for collaboration on QlikView Management.

richcook
New Contributor III

Named User CAL - Restrict Access To All Docs

We have recently converted some document cals to named user cals and its seems that named user cals can open every document. Is there / what's the best way of restricting access to the documents for the named users? -The document cal method works fine for the other users.

I think I remember reading somewhere we could put documents in folders and then AD security groups and NTFS permissions but that seems like it could be a bit admin heavy.

We are using section access already for data reduce, would it have to be in there?

Thanks,

Tags (4)
1 Solution

Accepted Solutions
MVP
MVP

Re: Named User CAL - Restrict Access To All Docs

Hi,

You are right, a Named User CAL allows that user to see as many documents as available in the AccessPoint. However, there are several methods to make them unavailable for users. One is using the NTNAME field in section access, so the Document List in the AccesPoint is filtered by it, and if the user NTNAME is not listed in section access, he will not be able to see this document. To make sure this happens in the document, go to the Settings menu, Server tab, and check Document List Based on Section Access.

Another one is what you mention in regards to NTFS permissions, but only in the case you have chosen NTFS as your security method for authentication and NTLM as authorization in the QMC.

If you are using DMS, make sure you Authorize the correct users in the Documents, User Documents, Authorization tab within the QMC. When you generate a new task you can set it in the Distribute tab if you are using Publisher.

Hope that helps.

Miguel

2 Replies
MVP
MVP

Re: Named User CAL - Restrict Access To All Docs

Hi,

You are right, a Named User CAL allows that user to see as many documents as available in the AccessPoint. However, there are several methods to make them unavailable for users. One is using the NTNAME field in section access, so the Document List in the AccesPoint is filtered by it, and if the user NTNAME is not listed in section access, he will not be able to see this document. To make sure this happens in the document, go to the Settings menu, Server tab, and check Document List Based on Section Access.

Another one is what you mention in regards to NTFS permissions, but only in the case you have chosen NTFS as your security method for authentication and NTLM as authorization in the QMC.

If you are using DMS, make sure you Authorize the correct users in the Documents, User Documents, Authorization tab within the QMC. When you generate a new task you can set it in the Distribute tab if you are using Publisher.

Hope that helps.

Miguel

richcook
New Contributor III

Re: Named User CAL - Restrict Access To All Docs

Thanks Miguel, clear now. I think we'll just be putting Section Access on all docs and use the server filter.

Community Browser