Qlik Community

QlikView Security & Governance

Discussion Board for collaboration on QlikView Security and Governance.

Announcements

Breathe easy -- you now have more time to plan your next steps with Qlik!
QlikView 11.2 Extended Support is now valid through December 31, 2020. Click here for more information.

tdechiron
New Contributor III

Web Tickets Groups with Section access

Hi,

I have an app, that I access with the web ticket system, here is my authentication (this script is in ColdFusion):

     <cfxml variable="QVRequest">

            <Global method="GetWebTicket">

                <UserId><cfoutput>#QVUser#</cfoutput></UserId>

                <GroupList><string>#QVGroup#</string></GroupList>

                <GroupsIsNames>true</GroupsIsNames>

            </Global>

        </cfxml>

All is working well, my users come authenticated on access point, and can access to application with section access on NTNAME.

I would like limit access by group, and the documentation is not really clear about it.

What is the field that match the group in "GroupList" in section access ?

Is there a way to see in access point the group associated with the authenticated user?

1 Solution

Accepted Solutions
Not applicable

Re: Web Tickets Groups with Section access

Hi Tanguy

You need to include the GROUP as a field in the section access load, e.g.;

SECTION ACCESS;

Load * INLINE [

    ACCESS, NTNAME,GROUP   

    ADMIN, ADMIN1, GROUPA

    USER, USER1,  GROUPB

    USER, USER2, GROUPB

    USER, USER2, GROUPC

   

];

SECTION APPLICATION;

So by adding the groups here, you can limit users down to the relevant group or groups (USER2 has access to two groups via two records).  It is important to note that GROUP has to be capitalised (or at least that's what Qlikview says).  If you want your model to have Groups in lower case, simply add GROUP as an additional field.

There is no direct way to put this into the accesspoint as each qvw has it's own authentication, thus feasibly a user may have different group authorisation by qvw.

There may be a work around such as setting up a qvd with buttons to your different working qvws, and displaying the data there.  But this gets a bit heavier on the maintenance and is not a perfect solution.  I would simply ensure the user is aware of their authorisation limits on each qvw they enter.

I hope this helps.  Let me know how you get on.

Regards

Steve

2 Replies
Not applicable

Re: Web Tickets Groups with Section access

Hi Tanguy

You need to include the GROUP as a field in the section access load, e.g.;

SECTION ACCESS;

Load * INLINE [

    ACCESS, NTNAME,GROUP   

    ADMIN, ADMIN1, GROUPA

    USER, USER1,  GROUPB

    USER, USER2, GROUPB

    USER, USER2, GROUPC

   

];

SECTION APPLICATION;

So by adding the groups here, you can limit users down to the relevant group or groups (USER2 has access to two groups via two records).  It is important to note that GROUP has to be capitalised (or at least that's what Qlikview says).  If you want your model to have Groups in lower case, simply add GROUP as an additional field.

There is no direct way to put this into the accesspoint as each qvw has it's own authentication, thus feasibly a user may have different group authorisation by qvw.

There may be a work around such as setting up a qvd with buttons to your different working qvws, and displaying the data there.  But this gets a bit heavier on the maintenance and is not a perfect solution.  I would simply ensure the user is aware of their authorisation limits on each qvw they enter.

I hope this helps.  Let me know how you get on.

Regards

Steve

tdechiron
New Contributor III

Re: Web Tickets Groups with Section access

Thanks Steve, I will try this!