Qlik Community

QlikView Security & Governance

Discussion Board for collaboration on QlikView Security and Governance.

oscarmqz
Contributor III

Section Access question

Hi,

I'm using data reduction based in 1 field (Region). I've found in multiple pages, that in order to allow user to see everything, you either leave the field blank or you can type <ANY>.

In desktop either way works fine, but once in the access point it will say "You don't have access to this document" unless I specifically type 3 times (one per region) for every user with WW privileges.

Is this supposed to be like that or I'm doing something wrong?

 

Working in desktop but not in web:

ACCESSNTNAMEREGIONOMIT
ADMINAMERICAS\MARQUOSC<ANY>

ACCESSNTNAMEREGIONOMIT
ADMINAMERICAS\MARQUOSC

Working in desktop and web:

ACCESSNTNAMEREGIONOMIT
ADMINAMERICAS\MARQUOSCAMS
ADMINAMERICAS\MARQUOSCEMEA
ADMINAMERICAS\MARQUOSCAPJ

Thanks in advance!

Tags (2)
1 Solution

Accepted Solutions
carlos_reyes_qv
Valued Contributor

Re: Section Access question

Oscar,

Did you enabled the "Strict Exclusion" checkbox in the Document Properties? If so then you can't place a null value in the filter field. It'll work in the Desktop but never in server since in the AccessPoint all users (even ADMIN) are treated as users. So, if you enable "Strict Exclusion" you always have to create all the valid records for any user so it's able to enter the application.

The "Strict Exclusion" option checks that records in the Section Access table are valid for the data model and if it's not, then the user will be unnable to enter the app. If you don't enable the "Strict Exclusion" option, then if a user doesn't have a valid Section Access record, QlikView will enable that user to enter the app and see all the data in it.

About the "ANY" value used in several examples in the Community... As far as I know...I think it's meant to indicate that that value will be used to generate all the valid records for that user, usually using applymap and other functions, because "ANY" is not a reserved value that QlikView will recognize as all the possible values. So, QlikView will try to match "ANY" to a posible REGION (in your case) and that will never be found so the user won't be able to enter the app.

Hope this helps!

4 Replies
carlos_reyes_qv
Valued Contributor

Re: Section Access question

Oscar,

Did you enabled the "Strict Exclusion" checkbox in the Document Properties? If so then you can't place a null value in the filter field. It'll work in the Desktop but never in server since in the AccessPoint all users (even ADMIN) are treated as users. So, if you enable "Strict Exclusion" you always have to create all the valid records for any user so it's able to enter the application.

The "Strict Exclusion" option checks that records in the Section Access table are valid for the data model and if it's not, then the user will be unnable to enter the app. If you don't enable the "Strict Exclusion" option, then if a user doesn't have a valid Section Access record, QlikView will enable that user to enter the app and see all the data in it.

About the "ANY" value used in several examples in the Community... As far as I know...I think it's meant to indicate that that value will be used to generate all the valid records for that user, usually using applymap and other functions, because "ANY" is not a reserved value that QlikView will recognize as all the possible values. So, QlikView will try to match "ANY" to a posible REGION (in your case) and that will never be found so the user won't be able to enter the app.

Hope this helps!

oscarmqz
Contributor III

Re: Section Access question

Thanks Carlos, so I kept "Strict Exclusion", loaded all possible options with a dummy user and used the "Star is *" command so I can fill * instead of blank, and it's working just fine. I've added you as contact in LinkedIn. Thanks again for your help.

saumyashah90
Valued Contributor

Re: Section Access question


Hi Carlos,

I have similar problem,

if check Strict Exclusion, i dont see my application on access point,

if i uncheck it, i can see the application but all values are seen.

can you please help me out in keeping the strict exclusion checked and my application also being seen on access point

oscarmqz
Contributor III

Re: Section Access question

Hi Saumya,

Could you please post your section access script and your access list table?

Community Browser