topic Which Resource in the security rule should be enabled to over right the apps in Management & Governance

Which Resource in the security rule should be enabled to over right the apps

usharanirangana — Wed, 20 Jun 2018 04:20:22 GMT

Hi,

Which Resource in the security rule should be enabled to over right the apps, Please Suggest.

Regards,

Usha

Re: Which Resource in the security rule should be enabled to over right the apps

Levi_Turner — Wed, 20 Jun 2018 17:00:59 GMT

Do you mean what rights are needed to enable publish and replace functionality in the QMC?

Re: Which Resource in the security rule should be enabled to over right the apps

usharanirangana — Thu, 26 Jul 2018 14:04:26 GMT

‌yes..

Re: Which Resource in the security rule should be enabled to over right the apps

Levi_Turner — Thu, 26 Jul 2018 16:13:35 GMT

Using a quick demo:

Stream:
- Read and Publish Rights
Original App (e.g. App_GUID or App_*)
- Read, Update, Delete
App to be published:
- Read, Update, Delete, Publish
App.Objects belonging to both apps:
- Read, Update, Delete

Example rule:

QmcSection_App
Read
((user.name="pandrtest"))

and

App*
Read, Update, Delete
((resource.resourcetype = "App" and resource.id="a495d8bd-931a-478a-b5e3-9cccdf1e48a4") or ((resource.resourcetype="App.Object" and resource.app.HasPrivilege("read")))) and (user.name = "pandrtest")

The user (pandrtest) owns the app to be published,so they have publish rights on the app to be published from the default OwnerPublishDuplicate rule and its objects from the default OwnerPublishAppObject rule.

If you're receiving an insufficient privileges error message then it's due to App.Objects in all likelihood, so demo that out with a rule like:

App*
Read, Update, Delete
((resource.resourcetype="App.Object" and resource.app.HasPrivilege("read"))) and (user.name = "pandrtest")