Security Rule to only allow certain people to export data from an app in a stream?

[mwallman]

Hello all,

How can I write a good Security Rule to only allow certain people to export data from an app in a stream?

For example I have an app in the Everyone stream called Sales Insight.

There are 5,000 users for this app but I only want 5 people to be able to export data from this app who have read permissions to the app. The people are:

ID	Name
4455455	Joe Bloggs
5666767	Chris Jones
3467868	Pete Mack
7889845	Pat Post
9966745	Michelle Huggins

[s_kabir_rab]

Hi @mwallman - Yes you can use a security rule to achieve this.

You will have to disable the default "ExportAppData" rule in QMC.

Then create a new rule with the following;

Resource Filter = APP_*

Action = Export Data

Conditions = resource.HasPrivilege("read") and (user.name="A")

Note: I would recommend that you use either group or custom property for these 5 users and built the rule using the custom property rather than using the user names. That way you never have to change the security rule to add user, instead you just assign the user a custom property.

EX: Create a custom property called "ExportData" with value "ExportAllowed". And then change the condition as per below

Conditions: resource.HasPrivilege("read") and (user.@ExportData="ExportAllowed")

Hope this solves your problem. Have a good day.