You can control access to Master Items in a published app by setting resource.objectType to "dimension" or "measure".
Here are two examples:
- Allows the user to create any app object for the published apps:
!resource.App.stream.Empty() and resource.App.HasPrivilege("read") and !user.IsAnonymous()
- Allows the user to create the specific app object for the published apps, such as sheet, bookmark, story, master item, etc:
!resource.App.stream.Empty() and resource.App.HasPrivilege("read") and (resource.objectType = "userstate" or resource.objectType = "sheet" or resource.objectType = "story" or resource.objectType = "bookmark" or resource.objectType = "snapshot" or resource.objectType = "embeddedsnapshot" or resource.objectType = "hiddenbookmark" or resource.objectType = "dimension" or resource.objectType = "measure") and !user.IsAnonymous()
Environment:
Qlik Sense Enterprise on Windows