Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Want to see what's currently in public preview? We've pulled it all together in one place. Check it out here
cancel
Showing results for 
Search instead for 
Did you mean: 
Somzz
Contributor II
Contributor II

Section Access - How does GROUP access works?

Hello,

Could someone please explain how does wildcard '*' work with GROUP in Section access?

 

Example 1 - Granting access to a single user:

LOAD * INLINE[

ACCESS, USERID, REGION

USER, DOMANI\USER1, MUM

USER, DOMANI\USER2, PUN

USER, DOMANI\USER3, *

];

Section Application;

LOAD * INLINE[

Region, description

MUM, Mumbai

PUN, Pune

BLR, Banglore

];

What regions will User1, User2 & User3 see?

 

Example 2 - Granting access to a group of users:

LOAD * INLINE[

ACCESS, USERID, GROUP, REGION

USER, DOMANI\USER1, GROUP1, MUM

USER, DOMANI\USER2, GROUP2, PUN

USER, DOMANI\USER3, GROUP3,  *

];

Section Application;

LOAD * INLINE[

Region, description

MUM, Mumbai

PUN, Pune

BLR, Banglore

];

What regions will User1, User2 & User3 see?

 

According to me- 

In Example1- User 1 will see the Mumbai region, User 2 will see the Pune region & User 3 will see both Mumbai & Pune region but not Banglore (as it's not listed in the access table)

 

In Example2 - User 1 will see the Mumbai region, User 2 will see the Pune region & User 3 will see Mumbai, Pune & Banglore region ( as when '*' is used with GROUP then it refers to the whole data model & not just the listed values in access table)

 

P.S- I think this might be a silly question to some of you but I am really confused on how exactly wildcard '*' works with GROUP in Section Access. 

Thanks a bunch! 

2 Replies
ramchalla
Creator II
Creator II

@Somzz 

in case of Example2, User 3 will be able to see only the Region values which are listed in the section access code when we specify "*" for that user. As you have specified "MUM" and "PUN" as the values in section access code, User 3 will be able to see only these regions "MUM" and "PUN"

Somzz
Contributor II
Contributor II
Author

Could you please refer below pdf page 3 & page 7 specifically. It says that the asterisk “*” with GROUP doesn't mean "all that are listed". 

Even on Qlik Website: https://help.qlik.com/en-US/sense/September2020/Subsystems/Hub/Content/Sense_Hub/Scripting/Security/... 

It says

"A wildcard, *, is interpreted as all (listed) values of this field, that is. a value listed elsewhere in this table. If used in one of the system fields (USERID, GROUP) in a table loaded in the access section of the script, it is interpreted as all (also not listed) possible values of this field."