This works perfectly for me but other users get "reload failed" error. Have you an idea which could cause this? Other users got 'Access denied' error before the change in the security rule that you suggested above. So it seems that the other users have rights to do the reload but something happens.
Other users doesn't have admin rights. Qlik Sense version is 3.2 SR4.
I wanted to share my current rule. In hindsight it seems simple, but it took me a while to understand Qlik Sense rules enough to get this working.
Resource filter : App*
Actions : Read, Update
Conditions : ((resource.resourcetype = "App" and resource.stream.HasPrivilege("read")) and (resource.@AppLevelMgmt.empty() or resource.@AppLevelMgmt=user.Group)) or ((resource.resourcetype = "App.Object" and resource.published ="true" and resource.objectType != "loadmodel") and resource.app.stream.HasPrivilege("read"))