Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hi All,
I was trying to implement section access to restrict what level of data a user can see. Let's take a scenario, I want to restrict user view based on country and region.
User | Country | Region |
A | India | All |
B | USA | Texas |
C | Canada | All |
D | All | All |
Section Access;
security:
Load * Inline [
ACCESS,USERID, COUNTRY, REGION
USER,DOMAIN\A,INDIA,ALL
USER,DOMAIN\B,USA,TEXAS
USER,DOMAIN\C,CANADA,ALL
USER,DOMAIN\D,ALL,ALL
];
When I implement the above section access, all users see only USA and Texas. The issue occurs only when I add Region in section access. Your help is much needed.
Hi, * could be used to give acess to all values in a field, but only to values loaded in the section access itself. https://help.qlik.com/en-US/sense/February2021/Subsystems/Hub/Content/Sense_Hub/Scripting/Security/m...
To give access to all values of the field you can first load all values and then you can use *.
ie:
AccessData:
LOAD 'USER' as ACCESS,
'DOMAIN\ADMIN' as USER // or a dummy user that don't really exists
autogenerate 1;
Join (AccessData)
LOAd Distinct COUNTRY, REGION
FROM/resident [WhereValuesAreStored];
concatenate (AccessData)
Load * Inline [
ACCESS,USERID, COUNTRY, REGION
USER,DOMAIN\A,INDIA,*
USER,DOMAIN\B,USA,TEXAS
USER,DOMAIN\C,CANADA,*
USER,DOMAIN\D,*,*
];
Hi, * could be used to give acess to all values in a field, but only to values loaded in the section access itself. https://help.qlik.com/en-US/sense/February2021/Subsystems/Hub/Content/Sense_Hub/Scripting/Security/m...
To give access to all values of the field you can first load all values and then you can use *.
ie:
AccessData:
LOAD 'USER' as ACCESS,
'DOMAIN\ADMIN' as USER // or a dummy user that don't really exists
autogenerate 1;
Join (AccessData)
LOAd Distinct COUNTRY, REGION
FROM/resident [WhereValuesAreStored];
concatenate (AccessData)
Load * Inline [
ACCESS,USERID, COUNTRY, REGION
USER,DOMAIN\A,INDIA,*
USER,DOMAIN\B,USA,TEXAS
USER,DOMAIN\C,CANADA,*
USER,DOMAIN\D,*,*
];
Thanks a lot!!! It worked for me 🙂