What is causing this error?

The Marketing user who should access a stream of the same name receives a message: "An error occurred. Access is denied".

The rule in the stream is:

((user.group!="Sale" and user.group!="Finance" and user.group!="Accounting"))

What is causing this error?
A . The Marketing group does not have access permission to the stream and possibly the application
B. Group rules are excluding the user
C. The application contains Section Access and the Marketing group is not configured on it
D. The application contains Section Access and the user is not included in it

View Answer

Answer: A

Explanation:

This issue can confuse even the most experienced. And I’ll explain the reason:

It is very common in Qlik Sense Enterprise environments, especially in the first deployment of the client someone create a Security Rule with parameter Resource filter = "Stream_*" for all users, so that everyone can access the new streams as they are created automatically.

And then, when they create a new stream, this type of rule is automatically inherited, giving the impression that by default access to the stream is guaranteed, which is not true.

For a user to have access to a stream, there must be a rule that gives them access permission. According to the issue, the stream rule prevents some groups from going into the Stream, but has no other rules that give the permission themselves.

Another point is confusion about Section Access. The clue is about the error message. When the user does not have access due to Section Access the message is only "Access Denied" and not "An error has occurred. Access is denied". There might even be an error there, but there’s a security rule situation that needs to be resolved first.