Security rule to access apps in same stream based on department

[#1]

Hi All,

I have 3 apps created for three different departments (Sales, Operations, Finance). All three Apps are published in same stream (Ex: Testing. Please see the requirement below

Stream	App	User	Department
Testing	App 1	John	Sales
Testing	App 2	John	Operation
Testing	App 2	Smith	Finance
Testing	App 3	Nick	Finance

Can anyone please suggest/guide me to create security rule, so that user have right access to the appropriate app's which are published in the same stream?

Thanks in advance