Qlik Community

QlikView Security & Governance

Discussion Board for collaboration on QlikView Security and Governance.

fosterma
New Contributor II

Conditional Section Access

I have created a dashboard with section access that I am struggling to get working when served from my AccessPoint.

Data Reduction has been enabled and I have tried temp disabling Strict exclusion in the Opening Settings.

The aim is to hide certain sheets/objects depending on the condition of %SEC_IT

The problem I'm facing is that when the dashboard is published and I access it via the portal while logged on as DOMAIN\USER1 or 2

All the sheets are visible and it appears that section access is ignored.

Perhaps a fresh pair of eyes can help - or perhaps I'm using the wrong method.

Any insight appreciated. Script Example:

Section Access;
LOAD * INLINE
[ACCESS, NTNAME, %SEC_IT
ADMIN, DOMAIN\ADMINSERVICE, 1
ADMIN, DOMAIN\ADMIN_CREATOR, 1
USER, DOMAIN\USER1,0
USER, DOMAIN\USER2,0

];
Section Application;

Security:
LOAD * INLINE [
%SEC_IT
1
0
];

1 Solution

Accepted Solutions
MVP
MVP

Re: Conditional Section Access

If you are reloading the qvw on access point, you need to take care that the server account reloading the app is listed in the section access table.

Second, I believe you need to take care that this account does not reduce the values in the reduction field to certain values, this will prevent users that need to be reduced to different values from accessing the QVW (with strict exclusion being enabled) or from seeing the correct reduced value (strict exclusion being disabled).

Section Access;
LOAD * INLINE
[ACCESS, NTNAME, %SEC_IT

ADMIN, DOMAIN\YOURQVSERVICEACCOUNT, *
ADMIN, DOMAIN\ADMINSERVICE, 1
ADMIN, DOMAIN\ADMIN_CREATOR, 1
USER, DOMAIN\USER1,0
USER, DOMAIN\USER2,0

];

5 Replies
agni_gold
Valued Contributor II

Re: Conditional Section Access

Can you please send your sample application.

Re: Conditional Section Access

Have a look at this document: Section Access - Hide Sheet Level


talk is cheap, supply exceeds demand
sureshqv
Esteemed Contributor III

Re: Conditional Section Access

hi,

chk below

Section Access

MVP
MVP

Re: Conditional Section Access

If you are reloading the qvw on access point, you need to take care that the server account reloading the app is listed in the section access table.

Second, I believe you need to take care that this account does not reduce the values in the reduction field to certain values, this will prevent users that need to be reduced to different values from accessing the QVW (with strict exclusion being enabled) or from seeing the correct reduced value (strict exclusion being disabled).

Section Access;
LOAD * INLINE
[ACCESS, NTNAME, %SEC_IT

ADMIN, DOMAIN\YOURQVSERVICEACCOUNT, *
ADMIN, DOMAIN\ADMINSERVICE, 1
ADMIN, DOMAIN\ADMIN_CREATOR, 1
USER, DOMAIN\USER1,0
USER, DOMAIN\USER2,0

];

fosterma
New Contributor II

Re: Conditional Section Access

Thank you swuehl

ADMIN, DOMAIN\ADMINSERVICE, 1 was my QV service account, changing 1 to * made the difference.

Kind Regards

Mark

Community Browser