Security Rule help

[userid128223]

I have a rule that allows some user to handle task reloads.  Below is the rule.

Resource filter = QMCSection_Task,ReloadTask_*,App_*,App.Object_*, SchemaEvent_*

Rule: ((user.@UDR_User_Group="ReloadAdmin"))

Question:

Above rule does not work right as it allows access to all apps. Instead

I only want Reload Admins to have access to PUBLISHED APP and not all apps. How can i change this. 

[tresesco]

You could try putting additional condition (i.e. - with and) like:

(resource.resourcetype = "App" and resource.published = "true")

[userid128223]

Thx. I have follow up question.

Why do group and ungroup conditions? can you explain. also explain when to use what and why. 

for example in below case does it matter if #1 or #2.

#1

((user.@UDR_User_Group="ReloadAdmin" and resource.resourcetype="App" and resource.published="True"))

#2

((user.@UDR_User_Group="TaskAdmin") and (resource.resourcetype="App" and resource.published="True"))