Is the below scenario a security breach of qlik sense?

[baarathi]

I am able create a connection between qlik sense app and qlik nprinting app by importing it to QMC (where the app is not published,  just imported in qmc) . How can a nprinting user access a qlik sense app that is yet to be published?

[Lech_Miszkiewicz]

I don't see a problem.

Since you are adding NPrinting service account as a root admin in QMC console (this is the requirement) you are automatically making it available for NPrinting.

Since NPrinitng is not tapping Qlik Sense through HUB it has an access to all documents.

On the other hand - what user did you put through in your NPrinting connection? Did you use NPrinitng Service account? 

[baarathi]

Hey Lech,

               Yes currently i tried it out with NPrinting service account. But this scenario will be the same if i don't use nprinting service account. I'll try it out. If there is an answer it for please let me know.

Thanks and Regards

Baarathi

[Lech_Miszkiewicz · Accepted solution]

Hi,

Thats not true - If the user used in connection is not a root admin it will not be able to read from work stream - unless document was created by this user!!!

Since you are using service account which has RootAdmin privilages it can read all documents on QS server

[baarathi]

Thank You Lech.