4 Replies Latest reply: Nov 7, 2016 7:56 AM by Anand Chouhan RSS

    section access with AD groups

    Virendra Chawra

      Hi ,

       

       

      i am recently working in section access with AD group .

       

      but as per my scenario we need to add 5 user and these user can see 1 sheet ...other user can not.

      but other users are more than 500.

       

      is there any way that (not equal to ) works in section access script.

       

      Section Access; 

      Security: 

      LOAD * INLINE [ 

      ACCESS, UPPER(NTNAME) AS NTNAME,UPPER(USERNAME) AS USERNAME 

      ADMIN, amazon\AWS PROD Qlikview Power Users,amazon\AWS PROD Qlikview Power Users

      USER, amazon\AWS UAT Qlikview Power Users,amazon\AWS UAT Qlikview Power Users

      ]; 

       

      Section Application; 

      SheetAccess: 

      LOAD * INLINE [ 

      USERNAME, SHEET1FLAG, SHEET2FLAG 

      amazon\AWS PROD Qlikview Power Users, 0,0

      amzon\AWS UAT Qlikview Power Users, 0,1 

      ];

       

       

      as per below script i don't wat that other than amzon\AWS UAT Qlikview Power Users can not see this sheet hence they can view other sheets in documents.

       

      ouer group "AWS UAT Qlikview Power Users" having those 5 user but other users are in different -2 groups that we cannot mention here in script .

       

       

      please suggest is there any mechanism that we can manage the sheet access for 5 users and other user can only see other sheets not this one.....please suggest the code logic.

        • Re: section access with AD groups
          Anand Chouhan

          Try this ways

           

          Section Access;

           

          Security:

          Load ACCESS, UPPER(NTNAME) AS NTNAME, UPPER(USERNAME) AS USERNAME;

           

          LOAD * INLINE

          [

          ACCESS,  NTNAME, USERNAME

          ADMIN, amazon\AWS PROD Qlikview Power Users,amazon\AWS PROD Qlikview Power Users

          USER, amazon\AWS UAT Qlikview Power Users,amazon\AWS UAT Qlikview Power Users

          ];

           

           

          Section Application;

           

          SheetAccess:

          LOAD * INLINE [

          USERNAME, SHEET1FLAG, SHEET2FLAG

          amazon\AWS PROD Qlikview Power Users, 0,0

          amzon\AWS UAT Qlikview Power Users, 0,1

          ];

           

           

          Regards

          Anand

            • Re: section access with AD groups
              Virendra Chawra

              no this will not help........i want other than 1 group can not access particular sheet.but they can access other sheet.

               

              other than 1 group there are more than 500 user......that's why i am looking for someting like <> in section access

                • Re: section access with AD groups
                  Marcus Sommer

                  AFAIK that's not possible with ad groups. Are the user member of a ad group which aren't allowed to access this sheet you couldn't give them access in any way - one access denial meant it's always denied regardless if there are further authorizations.

                   

                  This meant you need to use single user instead of user groups (this mustn't be done manually - there are ways to read an ad) or more practically by 5 users: you used a visibility-condition for this sheet like:

                   

                  if(match(osuser(), 'user1', 'user2', ...), true(), false())

                   

                  - Marcus

                  • Re: section access with AD groups
                    Anand Chouhan

                    I agree with the Marcus which is difficult as well as you can do another way by creating a group in the script by assuming they are this group and add the users which are belongs to this groups after this use section access for this group to restrict this users by section access.

                     

                    Regards

                    Anand