Qlik Sense security rule problem

[agigliotti]

Hello,

I'm using version 3.2 SR2 and I modified the following security rule:

CreateAppObjectsPublishedApp

adding the below condition :

and (user.group="role_dev" or user.group="role_ext")

---

!resource.App.stream.Empty() and resource.App.HasPrivilege("read") and (resource.objectType = "userstate" or resource.objectType = "sheet" or resource.objectType = "story" or resource.objectType = "bookmark" or resource.objectType = "snapshot" or resource.objectType = "embeddedsnapshot" or resource.objectType = "hiddenbookmark") and !user.IsAnonymous() and (user.group="role_dev" or user.group="role_ext")

---

However I noted a user not belonging to the "role_dev" or "role_ext" is able to create app objects ex. sheet object.

Is it a BUG ???

Please let me know asap.

Many thanks in advance for your time.

Best Regards

Andrea

[Anonymous]

Thanks Andrea for replying!!

I have checked the Audit Rule. They all have Read & Publish Access in Hub

Still not able to create any sheet, however they are able to create bookmark and stories..

One more thing I found is that if I publish the App in different stream these guys can create the sheet too. But the issue is that the user sheet or bookmark is not available

All:

Is there any way to publish the same App in other Stream with user sheets as well

Need urgent help!!

[agigliotti]

yes is possible take a look at Howto add a published community sheet to the approved sheets

to promote a sheet I used Qlik Sense QMC Utilities Qlik Sense QMC Utilities