How to manage QlikView document access

[Sonja_Bauernfeind]

Users can or cannot see and open documents on the AccessPoint which they should or should not have permission to. 

Environment:

QlikView any version 

QlikView has two modes of authentication: NTFS and DMS.

• NTFS relies on Windows file permissions. See How to check effective permissions on a file ? to verify if the user has inherited access from a group or folder that is not directly visible on the file.
• DMS authorization is done directly within the QlikView Management Console. See Restricting Access To Documents From QlikView AccessPoint in DMS Authenication Mode for details.
• Verify that a Publisher task has not been set up to distribute to the user or a group the user is a member of.

Some more examples of NTFS and DMS authorization are available here:

Example: How NTFS authorization works
Example: How DMS authorization works

What to verify when a user is unable to see a document or able to see one that they should not:

QlikView follows a few clear steps when validating if a user has access to a document or is allowed to open it.

Is the user authenticated? Do I know who they are? This step is usually performed by Windows or a Single Sign on System. 
Does the user have file access? With NTFS mode, this step is performed by Windows on disk. The document needs to have the correct Windows file permissions to allow the user to see the document. 
Does the user have file access (Section Access)? A second step and a secondary security measure. Section Access is done directly in the document. 
Does the user have a license? Checks if the user has a CAL assigned. 

If all those come back as OK, the user can see and open the document.