6 Replies Latest reply: Mar 2, 2011 5:37 AM by Logesh Jayaraman RSS

    Section Access

    Logesh Jayaraman

      Hi,

       

      In section Access for particluar logins i have given the Access Type as USER and the Access to all the Customers. It is not working.

      In the same time other login who has Access Type as USER and access to limited Customer is also working .

      Also the login with Access Type as ADMIN and the Access to all the Customers is working fine.

       

      Does it mean Access Type should be ADMIN so that he can have access to all Customers.

        • Section Access
          Karthik G

          Can you elaborate the behavior when you say that in the first case, it is not working?

          Have you met the following requirements?

          1. Checked the option Initial Data Reduction Based on Section Access on the Opening page of the Document Properties dialog?

          2. The field names and values are with the same UPPERCASE name in both section access and section application?

          3. Is there at least one field common between the section access and the section application with which you want to restrict the access. I guess that's the login field in your case, right? Or if the logins are categorized, try using the category field.

           

          Regards,

          -Karthik

          • Section Access
            Logesh Jayaraman

            Hi karthick,

            Thanks for response.Sorry for not providing the complete details.

            All the logins are in the same file. When i tried to login some login worked and some not worked.

            Hence

            Have you met the following requirements?

            1. Checked the option Initial Data Reduction Based on Section Access on the Opening page of the Document Properties dialog?

            None of the logins will work if the option is not selected

            2. The field names and values are with the same UPPERCASE name in both section access and section application?

            None of the logins will work if this criteria is not met

            3. Is there at least one field common between the section access and the section application with which you want to restrict the access. I guess that's the login field in your case, right? Or if the logins are categorized, try using the category field.

            None of the logins will work if this criteria is not met.

             

            • Section Access
              Tanel Rüütli

              Maybe you miss the statement "star is *;".
              This sure works:

               

              Section Access;
              // USERGROUP 0 has access to all customers, others restricted
              LOAD * INLINE
              [NTNAME, NTDOMAINSID, SERIAL, ACCESS, USERGROUP
              admin, somenumbers, *, ADMIN, 0
              manny, somenumbers, *, USER, 0
              minny, somenumbers, *, USER, 1
              qinny, somenumbers, *, USER, 2
              ];

              Section Application;
              star is *;

              // now we limit access to CustomerGroup according to USERGROUP
              CustomerGroupAccess:
              LOAD * INLINE
              [USERGROUP,CustomerGroup
              0,*
              1,1
              1,2
              1,3
              2,4
              2,5
              2,6
              ] ;


                • Section Access
                  Miguel Angel Baeyens de Arce

                  Hello Tanel,

                  Jus a couple of notes: in any case, the sentence "STAR IS *;" must precede any actual "*" used in the document, so according to your script, it would be the first line.

                  Apart from that, in Active Directory and other directories likely, the user must be given in the form DOMAIN\USERNAME, otherwise the document will not grant access to any user.

                  Regards.

                • Section Access
                  Miguel Angel Baeyens de Arce

                  Hello,

                  For what is worth, section access needs one line per allowed value in the reduction field, meaning that when the ACCESS of the user is ADMIN, and the document is opened in Desktop for developing, the REDUCTION field must be blank. This will not work accessing from clients (Plugin or AJAX), since all users are granted USER ACCESS regardless what you actually wrote in section access.

                  So in the following example:

                   

                  STAR IS *; SECTION ACCESS;LOAD * INLINE [ACCESSS, USERID, PASSWORD, CUSTOMERIDADMIN, ADMIN, ADMIN, *USER, USER1, USER1, CUSTOMER1USER, USER1, USER1, CUSTOMER2USER, USER2, USER2, CUSTOMER1]; SECTION APPLICATION;


                  User ADMIN will only be able to see information for Customer1 and Customer2, since "*" in section access doesn't mean "all possible values" rather than "all listed values under the reduction field".

                  You will need to add as many lines as possible values REDUCTION field has.

                  Hope that helps.

                  • Section Access
                    Logesh Jayaraman

                    Thanks Miguel and Tanel,

                    I have used ALL instead of *. Hence i was facing the problem. I have replaced ALL with * and it is working fine.