6 Replies Latest reply: Jan 13, 2017 8:29 AM by Aehman K RSS

    Section Acces Issue - Qlik Sense

    Partha Kulkarni

      Hi Everyone,

       

      I have a scenario where i need to restrict access to users on 8 fields. And i am restricting them as shown in image.

      However when one particular user 'User5' has restriction for value 'MNO'.

      If this particular(MNO) value does not exist in my application then he is getting full access instead of denying the access.

       

      Kindly suggest how to do i make sure that user is not getting the access to application.

       

       

      Thanks,

      Partha K

        • Re: Section Acces Issue - Qlik Sense
          Aehman K

          Hi,

          Can you paste your Section Access Script here?

          And I believe Section Access in Qlik Sense is different that Qlik view.

          Most of the settings are to be done in QMC Security rule for the App.

          But I believe you can also limit the access through the Section Access Script.

          https://qlikcentral.com/2016/05/31/setting-up-security-rules-in-qlik-sense-qmc/

           

          https://help.qlik.com/en-US/sense/1.1/Subsystems/ManagementConsole/Content/ServerUserGuide/SUG_ConfiguringSecurity_Envir…

            • Re: Section Acces Issue - Qlik Sense
              Partha Kulkarni

              Hi Arvind,

               

              I am aware of certain things that are different in qlikview and qliksense for section access.

              Following is the script that i have used.

               

              Section Access;

              Load

                   "ACCESS",

                   "USERID",

                   Field1,

                   Field2,

                   Field3,

                   Field4,

                   Field5,

                   Field6,

                   Field7,

                   Field8

              FROM [lib://Connection/ADUsers - V1.qvd]

              (qvd);

              Section Application;

                • Re: Section Acces Issue - Qlik Sense
                  Aehman K

                  As VJ mentioned you'd need a Data Model/Fact Table to restrict a user based on fields.

                   

                  Try this

                  STAR is *;


                  SECTION Access;

                   

                  USER:

                  Load

                       "ACCESS",

                       "USERID",

                       Field1,

                       Field2,

                       Field3,

                       Field4,

                       Field5,

                       Field6,

                       Field7,

                       Field8

                  FROM [lib://Connection/ADUsers - V1.qvd]

                  (qvd);

                   

                  LOAD * INLINE [

                     USERID, NTNAME,  FIELDNAME, ACCESS

                      YourServiceAccountUserID, YourServiceAccountNTNAME, SERVICEACNT, *, ADMIN

                      USER1, TheirNTNAME, *, *,  USER

                      USER2, TheirNTNAME, *, *, USER

                      USER3, TheirNTNAME, *, *,  USER

                      USER4, TheirNTNAME, *, *,  USER

                  ];

                  SECTION Application;

                   

                   

                  In above script

                  you can give like below

                  USERID, NTNAME,  FIELDNAME, ACCESS

                  PARTHA KULKARNI, DOMAIN\PARTHA, FIELD2, USER

                  PARTHA, DOMAIN\PARTHA, *, ADMIN

                  and so on....

                  First name Partha Kulkarni will be considered user based upon access, and NTNAME (ntname is important here and highly recommended for restricting and best practice) and this user can only see Field2

                  Second name Partha is an Admin and * will means there are no restrictions for this user.


                  This should work if you don't have thousand of different values.

                  As Field1,2,3,4,5.... are Fields and not values so you will have to enter Field1, Field2, Field3 instead of Field name and then give the value below that

                  USERID, NTNAME, ACCESS, Field1, Field2, Field2.....Field5, ACCESS

                  Username, Domain\User5, *,*,*.....,MNO, User

                   

                  Above the user5 will be restricted to MNO in Field5 and other fields will be available for him.

                  If you want to do it reverse then

                  Give the field names in Field1,2,3,4,6,7,8 and * on Field5

                   

                  I believe this should work.

                  If it doesn't then can you post a sample file and data?

                  There are other few different scripts based upon the data. Is it large volume or just few fields.

                  and 1 field from your fact should be matching to a field you want to restrict in section access, in this case Field names you've.

              • Re: Section Acces Issue - Qlik Sense
                vj kri

                Hi, Firstly, we should not restrict user based on 8 fields, it is not a good practice. We should try to reduce these to one or two based on the data model. So please paste data model, only then we will be able to help you