Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW
cancel
Showing results for 
Search instead for 
Did you mean: 
heimo_ernst_wei
Contributor III
Contributor III

section access

I 've created a "section access".

Now I get a somehow "strange" behaviour, but I did not find what my error is:

Fields are: ACCESS, GRUPPE, NTSID, SALESMAN, SYSTEM

  • In case I have for ACCESS USER and a valid value for SALESMAN the user defined by NTSID is able to open the file (and the restriction apply accordingly)
  • In case I have for ACCESS USER and a no value for SALESMAN (this means NULL) the user defined by NTSID is NOT able to open the file
  • In case I have for ACCESS ADMIN and a no value for SALESMAN (this means NULL) the user defined by NTSID is able to open the file

The purpos is to allow a sales-person to see only data linked to his customers whlie other users sahll see all customers (respectively "all" data)

I 've tried it with a * in the field SALESMAN as well as with the first character of teh relvant value and a * but this did not help either.

I would be gald for any idea how to solve the problem.

Heimo

1 Solution

Accepted Solutions
heimo_ernst_wei
Contributor III
Contributor III
Author

I found the solution:

in Document Properties / Opening "strict exclusion" was selected - this leds to the behavior as described above.

View solution in original post

5 Replies
Not applicable

heimo_ernst_wei
Contributor III
Contributor III
Author

Thank you for your proposal

However I am not generating my list via "inline" I do an import from SQL-database

Formula:  UPPER(If (Gruppe = 'SALES',"Test",))as SALESMAN;

But.:

UPPER(If (Gruppe = 'SALES',"Test",*))as SALESMAN;

does not work and

UPPER(If (Gruppe = 'SALES',"Test",'*'))as SALESMAN;

neither

Regards Heimo

Not applicable

If you upload sample application, that will be great..

Using "*" in section access doesn't mean "all values for field" but "all listed values for field within section access". If you want a user to get all information, set nothing instead the asterisk for any admin user, and as many lines as possible values for each user.

Hope that helps

Also i will suggest store section access data into the Qvd and then load into application. Use NTID not NSTID.

heimo_ernst_wei
Contributor III
Contributor III
Author

Thanks for your answer.

I know the selection coming from using * however I wanted to test if they can open the file then at least.

I do not have a *.qvd

I have tried the same approach with NTNAME but there is no difference.

The code which I am using is simple:

 

Section access;

SET vCatalog = 'cee_datawarehouse';

CONNECT TO [Provider=SQLOLEDB.xxxx);

STAR is *;

Load

UPPER("Access") as ACCESS,

UPPER("SID") as NTSID,

UPPER("System") as SYSTEM,

UPPER("Gruppe") as GRUPPE,

UPPER(If (Gruppe = 'SALES',"rp_id_m",))as SALESMAN;

SQL
SELECT * FROM "cee_datawarehouse".dbo."QlikViewProperties";


Section application;

....

The result is then (if put the same Load-statement in the Section application):

ACCESSGRUPPENTSIDSALESMANSYSTEM
USERPOLENGFS-1-5-21-xxx-123AT
USERSALESS-1-5-21-xxx-124AT94DE
ADMINGFS-1-5-21-xxx-125AT

The user S-1-5-21-xxx-123 cannot open the file

The user S-1-5-21-xxx-124  is able to open the file and gets the right data-set.

The user (admin) S-1-5-21-125 is able to open the file and gets the full data-set

Heimo

heimo_ernst_wei
Contributor III
Contributor III
Author

I found the solution:

in Document Properties / Opening "strict exclusion" was selected - this leds to the behavior as described above.