You can control access to Master Items in a published app by settingresource.objectType to "dimension" or "measure".
Here are two examples:
Allows the user to create any app object for the published apps:
!resource.App.stream.Empty() and resource.App.HasPrivilege("read") and !user.IsAnonymous()
Allows the user to create the specific app object for the published apps, such as sheet, bookmark, story, master item, etc:
!resource.App.stream.Empty() and resource.App.HasPrivilege("read") and (resource.objectType = "userstate" or resource.objectType = "sheet" or resource.objectType = "story" or resource.objectType = "bookmark" or resource.objectType = "snapshot" or resource.objectType = "embeddedsnapshot" or resource.objectType = "hiddenbookmark"or resource.objectType = "dimension" or resource.objectType = "measure") and !user.IsAnonymous()
The information in this article is provided as-is and to be used at own discretion. Depending on tool(s) used, customization(s), and/or other factors ongoing support on the solution may not be provided by Qlik Support.