5 Replies Latest reply: Feb 7, 2013 7:49 AM by Heimo Ernst Weiss RSS

    section access

    Heimo Ernst Weiss

      I 've created a "section access".

       

      Now I get a somehow "strange" behaviour, but I did not find what my error is:

       

      Fields are: ACCESS, GRUPPE, NTSID, SALESMAN, SYSTEM

       

      • In case I have for ACCESS USER and a valid value for SALESMAN the user defined by NTSID is able to open the file (and the restriction apply accordingly)
      • In case I have for ACCESS USER and a no value for SALESMAN (this means NULL) the user defined by NTSID is NOT able to open the file
      • In case I have for ACCESS ADMIN and a no value for SALESMAN (this means NULL) the user defined by NTSID is able to open the file

       

       

      The purpos is to allow a sales-person to see only data linked to his customers whlie other users sahll see all customers (respectively "all" data)

       

      I 've tried it with a * in the field SALESMAN as well as with the first character of teh relvant value and a * but this did not help either.

       

      I would be gald for any idea how to solve the problem.

       

      Heimo

          • Re: section access
            Heimo Ernst Weiss

            Thank you for your proposal

             

            However I am not generating my list via "inline" I do an import from SQL-database

             

            Formula:  UPPER(If (Gruppe = 'SALES',"Test",))as SALESMAN;

             

            But.:

            UPPER(If (Gruppe = 'SALES',"Test",*))as SALESMAN;

            does not work and

            UPPER(If (Gruppe = 'SALES',"Test",'*'))as SALESMAN;

            neither

             

            Regards Heimo

              • Re: section access
                Kirti Sheth

                If you upload sample application, that will be great..

                 

                Using "*" in section access doesn't mean "all values for field" but "all listed values for field within section access". If you want a user to get all information, set nothing instead the asterisk for any admin user, and as many lines as possible values for each user.

                Hope that helps

                 

                 

                Also i will suggest store section access data into the Qvd and then load into application. Use NTID not NSTID.

                  • Re: section access
                    Heimo Ernst Weiss

                    Thanks for your answer.

                     

                    I know the selection coming from using * however I wanted to test if they can open the file then at least.

                     

                    I do not have a *.qvd

                     

                    I have tried the same approach with NTNAME but there is no difference.

                     

                     

                     

                    The code which I am using is simple:

                     

                    Section access;

                    SET vCatalog = 'cee_datawarehouse';

                    CONNECT TO [Provider=SQLOLEDB.xxxx);

                    STAR is *;

                    Load

                    UPPER("Access") as ACCESS,

                    UPPER("SID") as NTSID,

                    UPPER("System") as SYSTEM,

                    UPPER("Gruppe") as GRUPPE,

                    UPPER(If (Gruppe = 'SALES',"rp_id_m",))as SALESMAN;

                    SQL
                    SELECT * FROM "cee_datawarehouse".dbo."QlikViewProperties";


                    Section application;

                    ....

                     

                    The result is then (if put the same Load-statement in the Section application):

                     

                     

                    ACCESSGRUPPENTSIDSALESMANSYSTEM
                    USERPOLENGFS-1-5-21-xxx-123AT
                    USERSALESS-1-5-21-xxx-124AT94DE
                    ADMINGFS-1-5-21-xxx-125AT

                     

                    The user S-1-5-21-xxx-123 cannot open the file

                    The user S-1-5-21-xxx-124  is able to open the file and gets the right data-set.

                    The user (admin) S-1-5-21-125 is able to open the file and gets the full data-set

                     

                     

                    Heimo