topic Re: Custom Property tagged users can see apps, not sheets/objects in App Development

Custom Property tagged users can see apps, not sheets/objects

ksgo — Wed, 16 Mar 2022 22:15:32 GMT

Hi - I set up a Custom Property called AppAccessGroup, and there are a few custom values assigned and I've since assigned them to both people and apps. Stream access was already started by being dictated by individual user so for the sake of not redoing it all, I've left that as is.

I then created a security rule to enforce the tags:

But now, the tagged users can only SEE the apps they're supposed to see (which, yay), but then are told there are no available sheets.

To my eye, none of my other existing security rules would limit what AppObjects can be seen or not, so I am at a complete loss as to why it is behaving this way and would really love some advice or idea of where to start looking. I need my users to see the apps they're supposed to see and everything within them. I thought using the App* was supposed to cover that but it does not appear to be doing so. I also attempted adding the AppObject* to the line with App*.

And yes, I have been turning off the default rule of Stream to test this (plus if it had been on, this wouldn't be happening).

Thank you.

Re: Custom Property tagged users can see apps, not sheets/objects

Digvijay_Singh — Wed, 16 Mar 2022 23:58:15 GMT

I think you would need to change this below rule as well, we did it long back so not exactly able to recall but can you compare what you got in this rule?

Full rule text as below

(resource.resourcetype = "App" and resource.stream.HasPrivilege("read") and resource.@PH_AppGroup.empty()) or ((resource.resourcetype = "App.Object" and
resource.objectType != "app_appscript" and resource.published ="true" and resource.objectType != "loadmodel") and resource.app.stream.HasPrivilege("read"))

Re: Custom Property tagged users can see apps, not sheets/objects

Digvijay_Singh — Thu, 17 Mar 2022 00:02:36 GMT

This is we got the other rule similar to what you have shown in your post, PH_Appgroup is the custom property to be assigned to both App and the user resource.

Re: Custom Property tagged users can see apps, not sheets/objects

ksgo — Thu, 17 Mar 2022 14:32:48 GMT

@Digvijay_Singh Thank you - if I'm reading this correctly then, I would need to apply both rules?

Re: Custom Property tagged users can see apps, not sheets/objects

Digvijay_Singh — Thu, 17 Mar 2022 16:31:24 GMT

Yes, unfortunately the video tutorial on this is appearing deleted from youtube, there are many good posts on this, one of them as below -

https://community.qlik.com/t5/App-Development/Qlik-Sense-Stream-Management-Security-Rules-and-Exception/td-p/1152564