QMC Security Rule - How to restrict app publishing by stream?

Anonymous — Fri, 07 Sep 2018 10:44:56 GMT

I am trying to create QMC organizational admin roles for my power users to do publishing of their apps.

I have created the custom property for each stream by division.

Criteria 1: The user must be a Division Admin

Criteria 2: The user can publish any application belong to that division OR any application created by them

Criteria 3: The user can only publish in the division stream which the user belongs to

Security Rule (A)

((user.roles="DivisionAdmin")

and (resource.@Company_Division=user.@Company_Division or resource.owner.name=user.name)

and (resource.stream.@Company_Division=user.@Company_Division)

and (resource.resourcetype="App" or resource.resourcetype="App.Object"))

Action: Create, Read, Update, Delete, Publish

Security Rule (B)

I have another security rules which gives read access of users to individual stream. (Governed by custom property)

Criteria 1: The user can read any stream as long as given access to

My security rule goes like this:

((resource.@Company_User_Stream_View=user.@Company_User_Stream_View))

Action: Read, Publish

Following this thread, Re: Can't publish a sheet‌, I am able to resolve the issue of missing publish button.

However, I am not able not able to restrict my power users to publish applications in certain streams only. (i.e. Rule A, Criteria 3)

Please advise, if you know the solution. Thanks in advance!

topic QMC Security Rule - How to restrict app publishing by stream? in App Development