Sheets Security with Section Access File

[Carlos_Reyes]

If you're already using Section Access to filter data, you have too many users and/or sheets to use the MATCH() method, or if you just need to handle those privileges outside of the .qvw ( e.g. a user will maintain an excel file), you can use/reuse Section Access to accomplish this requirement.

In this example I use INLINE loads in order to allow other people to reload the app, however you could load all tables, including the SECTION ACCESS table, from xls or qvd files.

Go to the following document to learn how to test this example:

Sheets Security with Section Access

[datanibbler]

Dito! Thanks for sharing this!

Security is a much-too-often-underestimated aspect, particularly when there are time constraints - performance, ease-of-use and the speed of development are commonly valued more highly ... until someone notices that the data is not secured and starts asking questions.

Just one addition (though it should be known) - the SECTION_ACCESS should generally be stored in a hidden script_part and the display of the log_execution_status for this hidden_script should be deactivated ("security" tab of the document_´properties).

To add extra layers of security, the SECTION_ACCESS table can be stored in an Excel file, like you said, and that can be in a folder that only yourself and whichever user your server uses to reload the apps have access to - I have such a folder for personell data. There is a special username we have on the server for the QV_Server to reload the apps, that has access to this folder, and myself - no one else.

Best regards,

DataNibbler

[#3]

HI, I was trying to use your example.

Here is the code:

SECURITY:

LOAD * INLINE [

   ACCESS,     NTNAME,         USER,        COUNTRY

    ADMIN,     ADMIN\1594,      

    USER,     ADMIN\1594499,         1594499,   

    USER,     ADMIN\PRUEBA2,         PRUEBA2,    MEXICO

    USER,     ADMIN\PRUEBA2,         PRUEBA2,    USA   

];

Section Application;

/* CHANGE THE NTNAME AND USER VALUES TO REFLECT YOUR OWN USERS */

SHEET_ACCESS:

LOAD * INLINE [

    USER,         SHEET1,     SHEET2

    1594499,          1,         0

    PRUEBA2,        0,        0

];

I  log in as ADMIN\1594499 . If my sheet_access looks like above I can see only SHEET 1 as expected.

However if I change the last line to

PRUEBA2,

0,

1

I can see both sheets

Any ideas??

[brijesh1991]

Facing the same issue; can you please let me know if you have resolved this?

[jaimeaguilar]

Hi,

you have to make sure that the option "Initial Data reduction based on section access" is enabled, in order to make this example work. This option is inside Document Properties > Opening.

Also, you have to test this example as a USER, otherwise you'll see all the tabs because you're logging as ADMIN,

regards