Qlik Community

QlikView Security & Governance

Discussion Board for collaboration on QlikView Security and Governance.

Announcements
QlikView Fans! We’d love to hear from you.
Share your QlikView feedback with the product team… Click here to participate in our 5-minute survey.
Rules, plus terms and conditions, can be found here.
Not applicable

Section Access best practices

v11 without publisher:

I'm looking to see if there are best practices for securing document access via Section Access. In my scenario I have ten documents with section access in each document that limit user access to the respective document. I am finding that managing user access this way is very tedious in that for each access change I have to modify the load script and reload that document to implement the new user access and/or security.  I'm looking for an easier that allows me to:

1. Only allow users to see the documents they have access to

2. Quickly change user privileges without having to reload the entire document(s)

3. Easily manage user rights over all documents

4. Report on all user privileges across all section access enabled documents

Thanks for any guidance!

Tags (2)
1 Solution

Accepted Solutions
garystrader
Contributor III

Re: Section Access best practices

Unless you have a requirement otherwise, you should use NTFS.

Section Access can only be updated by reloading.  There's no other option that I'm aware of.

5 Replies
garystrader
Contributor III

Section Access best practices

Are you trying to control authorization at the document level, or row-level visibility via section access?  The answer depends on which type of authorization you're talking about.

Not applicable

Re: Section Access best practices

Eventually both, but first I'm just focusing on the document level.

garystrader
Contributor III

Re: Section Access best practices

Document level authorization is easy.  If you're using NTFS mode:

1. Apply NTFS filesystem security to the documents the user should see (will be hidden from AccessPoint if they are not given access)

2. See #1 - doesn't require reload

3. You can apply user rights at the folder level, which will propagate to all documents in folder

4. Hmm... unsure best way to do this in NTFS, maybe a PowerShell script?

You can also effectively use NTFS groups to make it easier to manage this.

Are you using NTFS or DMS?

Not applicable

Re: Section Access best practices

I suppose using NTFS is the most straight-forward way to go, so I appreciate your thoughts.

Do you have any thoughts on making row/column level Section Access changes on the fly without having to reload the document? Theoretically we wouldn't have to do this often if we are authorizing at the group level, but with specific user access than I can't think of any other way to apply these settings without reloading. Thanks for your help with this!

garystrader
Contributor III

Re: Section Access best practices

Unless you have a requirement otherwise, you should use NTFS.

Section Access can only be updated by reloading.  There's no other option that I'm aware of.

Community Browser