kabir-rab

Concept - Security rule in Qlik Sense

This section explains the concept of security rules in Qlik Sense

Authentication

Before you can use the Qlik Sense system, in most cases you want to know who the user is, we call this authentication.

The next step is that based on this userId you want to assign the user access rights, we call this authorization. Both developers and users communicate with Sense via the Proxy (see this as a webserver which performs the authentication step: who are you?).

Authorization using the security rules

After the authentication (who are you?) you need to think how you want to integrate the authorization (what can you do and see?). The keys you want to protect in Sense are called resources. Example resources are

kabir-rab

///$tab Load variables
REM
This section includes some variables used in the laod script.
Please amend this variables to point the app to the correct connections for your
environment, pointing to the log files.
=================================================================================;

SET liveLogConnection = '[YOUR_CONNECTION_NAME]';
SET serverName = '[YOUR_SERVER_NAME]';
SET liveLogLocation = '$(liveLogConnection)/$(serverName)_Audit_Engine.txt';

kabir-rab

//---------------------------------------------------------------------------------------------------------------------
//	This a sample script to show how to regenerate OAuth 2.0 access token when they expire. 
//  More about OAuth 2.0 - https://oauth.net/2/
//---------------------------------------------------------------------------------------------------------------------

//Token exipiry time - setting this in the past, so that during the first run, it renews before code execution
LET vTokenEcpireTime	= TIMESTAMP(NOW()-1000) ;

//Call this sub routine before all your other calls to make sure you have a valid token to complete the action
SUB RenewToken(vParamPlaceholder) //Just a placeholder variable for any future expansion of the routine

kabir-rab

$Today = Get-Date -UFormat "%Y%m%d %H%M"
$LogFile = "\\[LOG_DIRECTORY]\SiteCheck.txt"


# Drop all the restrictions on script execution
Set-ExecutionPolicy Unrestricted


# URL to check
$uri = "[SITE_URL]"