We are trying to allow a defined user group to have read access to all streams in the QMC, but we would like them to only be able to create and edit their own streams as well as the associated security rules. We seem to have gotten very close as most of the Edit Stream prompts cannot be edited by that user group, but once the user navigates to the security rules tab they are still able to create security rules to streams they do not own. Does anyone know how we can remove this access to create additional security rules to streams the user does not own? Is this even possible?
Currently we are trying to drive this with two rules.
The first being a Resource Filter of SystemRule_* only in the QMC. This rule allows a custom property @UserType = Developer the Actions of Create, Read, Update, and Delete.
The second being a QmcSection_Stream Only in the QMC. This rule allows a custom property @UserType = Developer the action of Read.
We have tried to implement further rule conditions such as user must own the stream, but so far have had no luck. Any additional insight or tips on how to achieve the expected result would be greatly appreciated. Thanks in advance!
