Qlik Community

QlikView Security & Governance

Discussion Board for collaboration on QlikView Security and Governance.

Announcements

Breathe easy -- you now have more time to plan your next steps with Qlik!
QlikView 11.2 Extended Support is now valid through December 31, 2020. Click here for more information.

sbtandyono
New Contributor II

Order Fields in Section Access

Hi All,

I read that the sequence in section access is:

1. Check NTNAME, if TRUE then authorization work

2. If NTNAME is not applied then check USER ID and PASSWORD

In Summary: (Check NTNAME) OR (Check User Id and Password)

What I need is (Check NTNAME) AND (Check User Id and Password). Is this possible?

My case

With script below, if I enter Access Point using user ID = "U2" then I get role="P1" AND role="P2".

What I expect is I get role="P1" only

Section Access;

LOAD * INLINE [

    ACCESS, USERID, PASSWORD, NTNAME, ROLE

    ADMIN, U1, 123456,G1/U1, ALL

    USER, U2, 424232,*, P1

    USER, U3, 423131,*, P2

];

Section Application;

[ExpFlag]:

LOAD * Inline [

    ROLE, Ex1 , Ex2, Ex3, Ex4, Ex5, Ex6, Ex7, Ex8, Ex9, Ex10, Ex11, Ex12

    ALL, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1

    P1, 0, 0, 0, 1, 0, 0, 1, 1, 1, 0, 1, 1

    P2, 0, 0, 1, 0, 1, 0, 1, 1, 0, 1, 0, 1

];

Kindly need your advice.Thank you.

Best Regards,

Satria

Tags (1)
3 Replies
mark6505
Valued Contributor III

Re: Order Fields in Section Access

Hi,

I am no sure if you can user both user name and NTNAME in that way, but i haven't tried.

I reckon the problem is to do with the NTNAME '*' as you are saying all NTNAME have access to P2 and P3.

Maybe try '' or ' ', so it has no NTNAME?

Mark

MVP & Luminary
MVP & Luminary

Re: Order Fields in Section Access

AFAIK all features within the section access are in a and-relation to each other. This meant if you applied NTNAME and USERID + PASSWORD both will be used. To check this make sure that within the document-properties (tab open) section access is enabled (strict exclusion is heavily recommended) and that used real NTNAME - a wildcard makes no sense for user, not even for admin then normally there will be not many admins so that they could be placed with their NTNAME within the section access.

Mre informations could you find here: Section Access

- Marcus

sbtandyono
New Contributor II

Re: Order Fields in Section Access

Hi Mark,

Thank you for your suggestion. Let me try your idea.

Yes, you are right, I never see this case (combine NT and user name) in tutorial/books.

I use this approach as we have limited license user at this moment. So there are 2 kind users:

- Windows NT user ---> for top management

- user name+password --> for group users

After we buy additional license, I prefer all authorization using NT.

Thanks

Satria