topic Security rules check if custom property is not set? in Management & Governance

Security rules check if custom property is not set?

Anonymous — Wed, 29 Jan 2025 17:06:43 GMT

Dear community,

is it possible to check inside the security rules if a custom property is not set?

I want that users that do not have a custom property for apps see all apps that also do not have a custom property, something like this:

(

(user.@AppLevelMgmt=resource.@AppLevelMgmt)

(

(resource.resourcetype = "App" and resource.stream.HasPrivilege("read") and

(user.@AppLevelMgmt=NOTHING SET)

)

Please help!

Anonymous — Thu, 02 Feb 2017 07:33:21 GMT

Got the solution at my own, folowing rules work:

(

(user.@AppLevelMgmt=resource.@AppLevelMgmt)

(resource.resourcetype = "App" and resource.stream.HasPrivilege("read") and

resource.@AppLevelMgmt.empty()) or ((resource.resourcetype = "App.Object" and

resource.published = "true") and resource.app.stream.HasPrivilege("read"))

)