Suggest an Idea

[Andre_Sostizzo]

Note: This idea represents the legacy Ideation Feature Request ID 000059230.

Folder Data Connection allows to see folders where the Service Account has access instead of using the credentials of the authenticated user in the hub.

Current resolution:

If users should not be granted read permissions to the directories in the local hard drive where the Qlik Sense nodes are installed, ensure the Folder Data Connection is protected by a security rule.

The requested Feature:

It has been brought up by many customers that limiting local drive file access on the Qlik Sense server based on what user is accessing the Data Connection, or having a setting for preventing the access as a whole would be highly beneficial.

[Ian_Crosland]

Thanks for submitting,  The logic is that for customers that are concerned about security there is an expectation that they configure our product accordingly. For example, they would not run on http:// or setup all users with root admin access. In this scenario we do not recommend customers allow all users to create folder connections as this would allow any user to access any folder that the Qlik Service Account is able to see. This should be governed and controlled as the OS level

Ian