Security rules

In most cases, end users need to share a published app for doing comments on. This will require a few Security Rules to create a new Role - Commenting Role. When assigned with Commenting Role, users will be able to do comments directly in published apps.
Just setup the below rules in Qlik Management Console and you are good to go.
If you have installed Kaptain, Komment will work without the security rule configuration.
For unpublished apps Komment will work without the security rule configuration.
Rule 1:
1
CommentingRole – App
2
Resource Filter: App_* 
3
Actions: Update 
4
Condition: ((user.roles="CommentingRole") and resource.stream.HasPrivilege("read"))
Copied!
End user needs an ‘UPDATE’ permission on the app that needs to be commented (modified) via extension.
Rule 2:
1
CommentingRole – AppObject
2
Resource Filter: App.Object_*
3
Actions: Read
4
Condition: ((user.roles="CommentingRole"))
Copied!
End user needs a security rule in appObject with ‘READ’ permission to load script, in order to trigger partial reload (Qlik Sense by default blocks script access in published apps).
Rule 3:
1
CommentingRole - DataConnection
2
Resource Filter: DataConnection_*
3
Actions: Read
4
Condition: ((user.roles="CommentingRole"))
Copied!
End user also requires all data connection with ‘READ’ permission that appears in the load script (all data connections used in current app, no matter it will be executed or not when doing partial reload - unfortunately it is how Qlik works).
Last step is to assign ‘CommentingRole’ to users who should be able to comment within published apps. This is done in the QMC.

Getting started - Previous

Configuration

Next - Getting started

Multiple Qlik Sense sites

Last modified 1yr ago

Copy link

Contents

Rule 1:

Rule 2:

Rule 3: