Qlik Security Rule-Allow Users To Reload App

[justindallasverizon]

Hello Folks,

We need users to be able to reload an app using writeback functionality.  I've created the following rule.

Does the rule allow them Read+Update for ALL App.Object_'s?  Even ones that aren't in the App_.e9... application?  If so, how do I further restrict this rule to allow Read+Update on the singular App in question?

Any guidance is greatly appreciated.

[rubenmarin]

Hi, that's for all, the security rule conditions should be configured to only give the needed permissions and no more, in example you can create an "advancedactions" (or any other name) custom property, with the Reload value, and you can filter to allow the permission only to apps with this custom property as:

(resource.resourcetype="App.Object" and resource.objectType = "app_appscript" and resource.app.@advancedactions="Reload")

You can also use resource.app.id to restrict by app id, but I usually use custom properties yo simplify administration.