Stream Security Rule for embedded Sheet

[ericdelaqua]

Hello,

I have a scenario am struggling with and hope for some guidance.

I have a published app (Sales) to a stream "Corporate"

I have embedded a sheet from the app into Salesforce.

User with access to the stream can see the sheet when they are in Salesforce.

I want all users with access to Qlik to be able to see the embedded sheet But I don't want users with NO access to the stream to see the stream. Basically you can see an embedded sheet from a published app but you can't see the stream where the app is published.

can this be achieved?  If not are they work around?

Thanks

Eric

[QlikFivePTG]

Hello,

Ever get an answer to this?

Thanks,

Rob

[ericdelaqua · Accepted solution]

Hi @QlikFivePTG 

For users to see the embedded sheet they must have access to the stream in which it is published, hence it is visible to them.

Thanks

[henrikalmen]

Users don't need access to the stream to be able to see the embedded content, all they need is access to the app and the app objects that are embedded. You can achieve this with security rules.

But if you allow a user access to an app in a stream the user doesn't have access to, that user will be able to open the app by figuring out the URL for it and that is not difficult to do if you have embedded a sheet from the app.