Section Access question

[Anonymous]

Hi,

I'm using data reduction based in 1 field (Region). I've found in multiple pages, that in order to allow user to see everything, you either leave the field blank or you can type <ANY>.

In desktop either way works fine, but once in the access point it will say "You don't have access to this document" unless I specifically type 3 times (one per region) for every user with WW privileges.

Is this supposed to be like that or I'm doing something wrong?

Working in desktop but not in web:

ACCESS	NTNAME	REGION	OMIT
ADMIN	AMERICAS\MARQUOSC	<ANY>

ACCESS	NTNAME	REGION	OMIT
ADMIN	AMERICAS\MARQUOSC

Working in desktop and web:

ACCESS	NTNAME	REGION	OMIT
ADMIN	AMERICAS\MARQUOSC	AMS
ADMIN	AMERICAS\MARQUOSC	EMEA
ADMIN	AMERICAS\MARQUOSC	APJ

Thanks in advance!

[Carlos_Reyes · Accepted solution]

Oscar,

Did you enabled the "Strict Exclusion" checkbox in the Document Properties? If so then you can't place a null value in the filter field. It'll work in the Desktop but never in server since in the AccessPoint all users (even ADMIN) are treated as users. So, if you enable "Strict Exclusion" you always have to create all the valid records for any user so it's able to enter the application.

The "Strict Exclusion" option checks that records in the Section Access table are valid for the data model and if it's not, then the user will be unnable to enter the app. If you don't enable the "Strict Exclusion" option, then if a user doesn't have a valid Section Access record, QlikView will enable that user to enter the app and see all the data in it.

About the "ANY" value used in several examples in the Community... As far as I know...I think it's meant to indicate that that value will be used to generate all the valid records for that user, usually using applymap and other functions, because "ANY" is not a reserved value that QlikView will recognize as all the possible values. So, QlikView will try to match "ANY" to a posible REGION (in your case) and that will never be found so the user won't be able to enter the app.

Hope this helps!

[Anonymous]

Thanks Carlos, so I kept "Strict Exclusion", loaded all possible options with a dummy user and used the "Star is *" command so I can fill * instead of blank, and it's working just fine. I've added you as contact in LinkedIn. Thanks again for your help.

[saumyashah90]

Hi Carlos,

I have similar problem,

if check Strict Exclusion, i dont see my application on access point,

if i uncheck it, i can see the application but all values are seen.

can you please help me out in keeping the strict exclusion checked and my application also being seen on access point

[Anonymous]

Hi Saumya,

Could you please post your section access script and your access list table?