topic Re: Help with security rule on Tasks in App Development

Help with security rule on Tasks

ali_hijazi — Thu, 31 Jul 2025 11:33:05 GMT

Hello
I have a security rule with resource filters as follows:
ReloadTask_*,CompositeEvent_*,SchemaEvent_*,ExecutionResult_*,ExecutionSession_*

Actions:
Create, Read, and Update

Conditions:

(
user.roles = "FinanceDeveloper" and (user.group = "Flash-BI" or user.group="Bifinance")
)

and

(
resource.app.owner.userid = user.userid
or
(resource.app.@FINANCE_SPECIFIC = "YES"
and resource.app.@AppAccess = user.@AppAccess
)
)

a user that statisfies these conditions can read the tasks, and can create a task however this user cannot create a trigger on that task.
user can create a task successfully without trigger but when the user tries to add a trigger and clicks the Apply button the following error message appears:

am I missing anything here?

Re: Help with security rule on Tasks

JandreKillianRIC — Thu, 31 Jul 2025 11:28:45 GMT

Hi @ali_hijazi

This all looks "perfect". Checking on some notes... the only thing I have different is I have ExternalProductSignOn_* as well on one of my rules. But doubt that this might be what's missing.

Maybe give it a try?

Regards

Re: Help with security rule on Tasks

ali_hijazi — Thu, 31 Jul 2025 11:34:59 GMT

@JandreKillianRIC I added this ExternalProductSignOn_* but still getting the same error message.

Re: Help with security rule on Tasks

JandreKillianRIC — Thu, 31 Jul 2025 11:37:45 GMT

**bleep**.... I will check again later and let you know if I find anything.

Re: Help with security rule on Tasks

ali_hijazi — Thu, 31 Jul 2025 16:05:57 GMT

@rwunderlich can you help on this topic?

Re: Help with security rule on Tasks

ali_hijazi — Fri, 01 Aug 2025 09:15:02 GMT

@marksouzacosta may you please help here?

Re: Help with security rule on Tasks

Levi_Turner — Fri, 01 Aug 2025 13:32:24 GMT

Triggers don't have a hierarchical relationship in the same way tasks do. Separate out the rule CompositeEvent_*,SchemaEvent_*,ExecutionResult_*,ExecutionSession_* entities into their own rule without the app level qualifiers. Example condition:

(
user.roles = "FinanceDeveloper" and (user.group = "Flash-BI" or user.group="Bifinance")
)

Re: Help with security rule on Tasks

ali_hijazi — Fri, 01 Aug 2025 14:27:19 GMT

thank you very much @Levi_Turner
yes it works!!