App Level Security doesn´t work. Cannot see published sheets

denisb — Wed, 29 Jan 2025 16:57:53 GMT

Hi,

I am working on a new security rule for App Level Security.

I want that users can only see the apps without a custom property "LDAP".

And my second step will be, that users can see those apps, when they have the right custom property.

So I changed the rule "Stream" to this:

( resource.resourcetype = "App" and resource.stream.HasPrivilege("read") and resource.@LDAP.Empty() ) or ( ( resource.resourcetype = "App.Object" and resource.published ="true" and resource.objectType != "app_appscript" and resource.objectType != "loadmodel" ) and resource.app.stream.HasPrivilege("read") )

This works, but not really.

My user cannot see a specific app, because this user has not the right custom property. So, this is good.

But the problem is, that he also cannot see published sheets in all apps.

topic App Level Security doesn´t work. Cannot see published sheets in Management & Governance

App Level Security doesn´t work. Cannot see published sheets