help in syntax of a security rule

[ali_hijazi]

Hello
I need to create a security rule to allow users to create a folder data connection that points only to one specific network path

I created the one below:

when I only write user.group="DEV" then it works fine
but when I add resource.Connectionstring like "*QDF_FIN*" the create-new-connection button at the top write when I open the data load editor will be disabled

kindly advise on how to accomplish my requirement

[mpc]

Hi, 

I'm not sure you can achieve this, since the connection string does not exist before the creation of the Data Connection. 

Best

[ali_hijazi]

@mpc  so how can I prevent users from creating a folder data connection to a specific folder location or network path?

[Alex_SEO]

It looks like the issue might be with how the resource.Connectionstring condition is being evaluated. When using wildcards like "*QDF_FIN*", some security rule engines treat them differently or might expect exact matches unless wildcard support is explicitly documented.

Try testing with a more precise match or check if the platform supports regex-style expressions instead of simple wildcards. Also, ensure the connection string format exactly matches what the platform sees — sometimes even a minor mismatch disables functionality.

I ran into a similar policy limitation recently while setting up internal access rules during a project for asbestos tile removal ohio, and a tiny syntax adjustment made all the difference.

Hope this helps you move forward — happy to help further if you can share more about the platform you're working with!