QlikSense security rules for 'Work' Stream allows all users to see it.

[johnnymartinez]

I've been diggin through google and various forum posts, but can't find a solution that works yet.

This was the most promising, but alas does not solve my issue.

https://community.qlik.com/t5/Qlik-Sense-App-Development/Enable-Disable-My-Work-stream-in-Qlik-Sense...

For some reason a default rule has changed and now all users can see my 'Work' stream of unpublished apps. 

Is there a way to either prohibit them seeing this stream completely, or remove visibility of unpublished apps? 

I looked into the ContentAdmin rules, and they are as default ( as highlighted in other threads ) so am not sure why all users can see it.

[jwjackso]

Go to the QMC->Audit.  Select "Target resource"=Apps, Environment="Only in hub" and a user that should not see the apps in your work stream.

In the list of apps displayed, double-click the "R" to show the security rules affecting that application.  Look for the rules that have action as "read" or "*". 

[dwforest]

Any of them disabled?

[johnnymartinez]

Thanks @jwjackso - that stopped the work stream showing up.

Someone had added a rule for ONE stream that had weirdly made ALL streams visible.

I've removed the rule, however now I face the reverse issue , of being unable to grant access back to the 'Everyone' Stream!

In these cases, would you simply re-install QLIKSENSE to restore all the default security rules, or can they be restored by some magic button in QMC somewhere?

[johnnymartinez]

None were disabled.  But it's a good starting point to check for sure! 

[johnnymartinez]

If it helps anyone in the future, searching this -  I had to redo the default security rules following the example on this page :

https://help.qlik.com/en-US/sense/February2019/Subsystems/ManagementConsole/Content/Sense_QMC/preins...

The 'work' stream containing my unpublished WIP apps now no longer shows for all users!