QlikSense Security Rule to enable only Bookmarks on Published app

[micheledenardi]

Hi to all,

i'm trying to modify the CreateAppObjectsPublishedApp rule to allow only bookmark creation, so i want to disable sheets duplication, snaphots, stories, access to snapshots library.

The original rule is this:

Resource Filter: App.Object_*

Action: Create

Conditions:

!resource.App.stream.Empty() and

resource.App.HasPrivilege("read") and

     (

     resource.objectType = "userstate" or

     resource.objectType = "sheet" or

     resource.objectType = "story" or

     resource.objectType = "bookmark" or

     resource.objectType = "snapshot" or

     resource.objectType = "embeddedsnapshot" or

     resource.objectType = "hiddenbookmark"

     )

and !user.IsAnonymous()

In order to permit only bookmarks creation (no snapshot, no sheet duplication..) i've changed the security rule like this:

Resource Filter: App.Object_*

Action: Create

Conditions:

!resource.App.stream.Empty() and

resource.App.HasPrivilege("read") and

     (

     resource.objectType = "bookmark"

     )

and !user.IsAnonymous()

All (more or less) it's fine but with a right click on the objects the user can still take snapshot and go to snapshots library.

Can anybody show me the mistake ?

[Raghul]

Hi,

I believe it is not possible to remove the Snapshot and Open Snapshot Library options when right click is performed on the object using security rules. Security Rules will disable the options from the navigation toolbar but not from the Right click operation.

However, based on the rule created, it will not give the user an option to use snapshots in their stories ,since the Story option is disabled.

[micheledenardi]

This is not correct,

security rules ALLOW you to disable right click options, as you can see.

But if i disable the snapshot i can't create bookmark, I suppose this is a QS bug because these two funcionallity are defined by two different resource.objectType, resource.objectType = "snapshot" and resource.objectType = "bookmark".