topic Re: App Level security in App Development

App Level security

gorterzelf7 — Mon, 01 Oct 2018 14:18:36 GMT

Hello all,

I have looked arround on the forum and saw 1 or 2 topics about app level security, but i think a few things have changed in the meanwhile and i was hoping somebody could explain it prober

My situation:

Under custom proberties I mate a group under the name Customers with resource type Apps, streams and users.

Under streams I have published apps with custom property the customer and a security rule voor user and # stream (customer)

Now I want an extra rule on App level. I know i have to add the customer to the custom properties of the App, but where and how do I make the security rule on App level?

I hope somebody can help.

With kind regards

Re: App Level security

Lisa_P — Mon, 01 Oct 2018 23:17:44 GMT

Section access is the technique used to limit the data and access within an app. It is done at the load scripting within the app and you will find many Blog posts and documents on Community to help you.

Here is the link to one:

Qlik Sense Security integration - Security Rules and Section Access

Re: App Level security

Levi_Turner — Thu, 04 Oct 2018 14:36:06 GMT

Hey Martijin,

So you want to control which apps inside a stream a user can see? If so then you will need to disable the default rule named Stream which governs inheritance from the Stream to the App. For reference points, please consult the Q-Stream-AppLevel rule on https://github.com/levi-turner/Qonnections2018-Rules#front-end-rules (reference video: https://www.youtube.com/watch?v=h5nBdt969XI).

Hope that helps.

Re: App Level security

gorterzelf7 — Tue, 09 Oct 2018 07:07:19 GMT

Tnx, I saw your video and i think I can make it work based on that video, I only need to find the right time to do it on the server. Tnx again.

Re: App Level security

gorterzelf7 — Wed, 10 Oct 2018 08:36:53 GMT

I needed to disable the security rule for stream and make a new one on the stream and on the app and add a customer propertie on all level. Tnx!

Example rule on App:

((resource.resourcetype = "App" and resource.stream.HasPrivilege("read") and user.@Customer=resource.@Customer) )