QliKView Server has two type of Authorization. NTFS and DMS. This article explains how DMS authorization works by using an example.[Prerequisite]
-. Domain is domain.local. Create 3 Domain users: Domain\User1, Domain\User2, Domain\User3 in Active Directory.
-. Prepare a document SectionAccess.qvw. Script below. Domain\User1, Domain\User2 exists in section access. Domain\User3 doesn’t exist in section access.
-. The document has "Initial Data Reduction Based on Section Access" Optin enabled
-. Put the SectionAccess.qvw into QMC document folder. Everyone has full access to the folder.
In this example, I configured \\dc1\share\Front-end\UserDocuments as the document folder in QMC.
-. Everyone has full access to document Folder.
-. Put the SectionAccess.qvw into document folder.
-. DSC connects Active directory, domain.local
-. QlikView Server > Security > Authorization is DMS authorization (QlikView controls file access)
-. QlikView WebServer > Authentication > Type is Ntml
-. Documents > User Documents > SectionAccess.qvw > Authorization
Press + button and select User Type "Named Users" then press add users and groups icon.
-. Add User1 and User3 and press OK button. Then Apress Apply button.
Login machine as domain\user1. Type whoami in command prompt to make sure the user is domain\user1
Open QlikView Destop and "Open In Server" You can see the user can see SectionAccess.qvw under UserDocuments Folder.
Document can be opened.[User2]
Login machine as domain\user2. Type whoami in command prompt to make sure the user is domain\user2
Open QlikView Destop and "Open In Server" The user2 CANNOT see SectionAccess.qvw. [User3]
Login machine as domain\user3. Type whoami in command prompt to make sure the user is domain\user3
Open QlikView Destop and "Open In Server" The user3 CANNOT see SectionAccess.qvw.