App Level Security doesn´t work. Cannot see published sheets

[denisb]

Hi, 

I am working on a new security rule for App Level Security. 

I want that users can only see the apps without a custom property "LDAP". 

And my second step will be, that users can see those apps, when they have the right custom property. 

So I changed the rule "Stream" to this: 

(
	resource.resourcetype = "App" 
	and resource.stream.HasPrivilege("read") 
	and resource.@LDAP.Empty()
) 
or 
(
	(
	resource.resourcetype = "App.Object" 
	and resource.published ="true" 
	and resource.objectType != "app_appscript" 
	and resource.objectType != "loadmodel"
	) 
	and resource.app.stream.HasPrivilege("read") 
)

This works, but not really. 

My user cannot see a specific app, because this user has not the right custom property. So, this is good. 

But the problem is, that he also cannot see published sheets in all apps.