Secruity Rule for partial reload without app_script possible?

[YB_Mo]

Hey colleagues,
I need your support for a moment. The requirement is as follows. Users should have the possibility to partially update the app. There is a button in the app for this. However, I don't want users to be able to open the data editor. I am currently using the following security rule:
App_*,App.Object_*
(((resource.resourcetype=“App” and resource.stream.name=“ABC”) or (resource.resourcetype=“App.Object” and resource.app.stream.name=“ABC” and resource.objectType = “app_appscript”))))

Is it possible to customize this so that the partial reload works without using the data editor?

I look forward to your feedback!