topic Re: Security Rule help in Management & Governance

Security Rule help

userid128223 — Wed, 15 Apr 2020 13:46:33 GMT

I have a rule that allows some user to handle task reloads. Below is the rule.

Resource filter = QMCSection_Task,ReloadTask_*,App_*,App.Object_*, SchemaEvent_*

Rule: ((user.@UDR_User_Group="ReloadAdmin"))

Question:

Above rule does not work right as it allows access to all apps. Instead

I only want Reload Admins to have access to PUBLISHED APP and not all apps. How can i change this.

tresB — Wed, 15 Apr 2020 13:59:37 GMT

You could try putting additional condition (i.e. - with and) like:

(resource.resourcetype = "App" and resource.published = "true")

userid128223 — Wed, 15 Apr 2020 15:25:08 GMT

Thx. I have follow up question.

Why do group and ungroup conditions? can you explain. also explain when to use what and why.

for example in below case does it matter if #1 or #2.

((user.@UDR_User_Group="ReloadAdmin" and resource.resourcetype="App" and resource.published="True"))

((user.@UDR_User_Group="TaskAdmin") and (resource.resourcetype="App" and resource.published="True"))