topic Re: Allow Users to Create Stories, But Not Edit Charts in Management & Governance

Allow Users to Create Stories, But Not Edit Charts

TKendrick20 — Fri, 15 Sep 2017 17:28:29 GMT

Is there a security setting that will allow users to create new stories and add visualizations to them, but not edit the sheet? I can't find any documentation on this.

Really I just need to know how to set up the security rule so a user can take snapshots of images, add them to the snapshot library, and then edit the story. I've tried a million different things and none of them seem to get it 100% working.

Thanks

Re: Allow Users to Create Stories, But Not Edit Charts

Vincenzo_Esposito — Sat, 16 Sep 2017 11:43:52 GMT

Tim, on a Server environment no one can modify a published app, even the owner. Do you probably mean to add personal sheets on a published app? If you just want to avoid users to create sheets on published app, you need to modify the security rule "CreateObjectPublishedApp". By default anyone (except anonymous can do it), you should add in "AND" any condition you like.

Re: Allow Users to Create Stories, But Not Edit Charts

korsikov — Sat, 16 Sep 2017 17:33:17 GMT

look here Re: User role to create bookmarks and stories in a published app

Re: Allow Users to Create Stories, But Not Edit Charts

TKendrick20 — Mon, 18 Sep 2017 15:15:32 GMT

I've tried that, but I still can't get it to work.

Re: Allow Users to Create Stories, But Not Edit Charts

TKendrick20 — Wed, 27 Sep 2017 18:11:44 GMT

Admins can most definitely edit published apps. I want some users to be able to create only stories and bookmarks. Not sheets. That security rule is enabled, but it is still not working.

Re: Allow Users to Create Stories, But Not Edit Charts

TKendrick20 — Wed, 27 Sep 2017 20:03:50 GMT

Turns out it was a bug the whole time!

Qlik Communnity Post: Re: Allowing end users to create bookmarks on sheets

Qlik Support bug fix: Qlik Support

What I ended up doing was disabling the "CreateObjectPublishedApp" rule and creating a new one that looks like this:

And the conditions:

((resource.objectType="bookmark" or resource.objectType="snapshot" or resource.objectType="story" or resource.objectType="embeddedsnapshot" or resource.objectType="hiddenbookmark") and (user.name="user_name")) and resource.App.HasPrivilege("read")

Then I applied the bug fix, restarted the services, and everything works as expected.