2 Replies Latest reply: Oct 1, 2015 9:34 AM by Puratchi Vendan RSS

    Section Access Issues ?

    Puratchi Vendan

      Issue with section access

       

      In security of document we use below options:

      1. Opening - Initial Data Reduction Based on Section Access
      2. Server – Filter Accesspoint Document list Based on Section Access.

       

      Section access:

      Load * [

      ACCESS, NTNAME, KEY

      USER,  WIN\T10255,                          23FD|232|34

      USER,  WIN\T10257,                          23AD|242|14

      USER,  WIN\T10258,                          23RD|262|54

      USER,  WIN\T10259,                          23YD|282|84

      ADMIN,WIN\ADMIN_AD_GROUP,     *|*|*

      USER,  WIN\TRAINING,                     23RT|656|98

      ]

      Section application;

       

      When user 10255 logs in in desktop it is working perfectly.

      But when the same report is checked in server (WEB URL) it logs in with the security AD group ADMIN_AD_GROUP.

       

      The same happens for other who are not a member of ADMIN_AD_GROUP.

      i.e. other users are also able to log with the admin ad group. Even though the users are not available in ADMIN id why QlikView takes those users.

       

      When removed admin group then the section access works correctly for each seperate users.

       

      The document opens correctly by checking the users list but the data is show for admin ID only.

      In Security :

      If –“Initial Selection based on Section Access” – this correctly selects the data , but when we give clear and unlock it shows data  for others users also.

       

      Please provide solution and weird behaviour of this section access.

        • Re: Section Access Issues ?
          Jeffrey Goldberg

          Puratchi, your submission reads like QlikView and not Qlik Sense.  Please confirm the appropriate product so we can make sure the question is stored in the proper section.

           

          As for your issue, when you open in browser, what credentials are cached in the browser?  Are you impersonating one of the users or is the cached user a member of the ADMIN_AD_GROUP?

           

          In addition, I see an issue with your code in a couple of places.  Is your code intended to be inline?  If so, your script needs to start with Load * Inline then the bracketed data.  Next, the asterisks for the KEY, unless that is how you set up the data then all you need to supply is a single asterisk to represent the relevant values that have been entered in the section access script.

           

          Regards,

           

          Jeff G

            • Re: Section Access Issues ?
              Puratchi Vendan

              Sorry jeff its a typo mistake instead of showing actual data i just masked with sample data.

              This is for Qlikview

              We use

               

              Section access:

              Load  ACCESS, NTNAME, KEY resident EmployeeTable;

              Section application;


              ADMIN_AD_GROUP is a group in which certail developers have access.

              TRAINING is a group who actually uses the report.

              Issue: When some one from TRAINING logs in it allows him but data is filtered for ADMIN_AD_GROUP  instead of his own ID. When using “Initial Selection based on Section Access” is excatly selects the data , But data reduction does not work in this case.

               

               

              This is just a example of how the data is in the table

              ACCESS, NTNAME, KEY

              USER,  WIN\T10255,                          23FD|232|34

              USER,  WIN\T10257,                          23AD|242|14

              USER,  WIN\T10258,                          23RD|262|54

              USER,  WIN\T10259,                          23YD|282|84

              ADMIN,WIN\ADMIN_AD_GROUP,    *|*|*

              USER,  WIN\TRAINING,                    23RT|656|98