Edit Published apps

[PDurnall]

Hi all, 

I inherited a Qlik system that was set up and have been updating and patching where needed however,

When you create an app in your work space and publish it your still able to edit the published version has any one come across a rule that makes this possible so I can look at reverting it to only being able to duplicate it.

[Or]

You'll have to check your Security Rules under QMC and find the one that's allowing it. Using Audit may help you find the right one.

[henrikalmen]

Perhaps start with checking the default security rule "Owner", it should have a condition that the app is not published. See section "Owner" here: https://help.qlik.com/en-US/sense-admin/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdministe... 

[PDurnall]

resource.IsOwned() and (resource.owner = user and !((resource.resourcetype = "App" and !resource.stream.Empty()) or (resource.resourcetype = "App.Object" and resource.published = "true")))

Tried this as false and still allows apps to be edited.

[henrikalmen]

You should not change that rule, you should make sure that you have it. And now that you have concluded that, unfortunately you need to look for other custom security rules in your system that causes the problem you are having.

[PDurnall · Accepted solution]

yer I'm finding some of the "default ones" have been changed from what they originally did so looking at changing them back to the default settings

So it turns out there was a rule set up as 
App_*,Stream_* 

with permissions to Create, Read, Update, Publish and Duplicate 

With the update one ticked it allowed users to edit the published apps.

Now I have turned this off people can edit ones in their own work area and then republish over the live ones.