Security rule resource.published="true" doesn't work as expected

[trappersw]

We want to give the end users access to all apps where the AD_GROUPS custom property is not filled in, but not the apps that are in the My Work stream. In order to accomplish this we have the following security rule:

Resource filter = App_*

Actions= Read

Advanced conditions = resource.@AD_GROUPS.empty() and resource.published="true".

However, the apps in the my work stream are still visible.

Anyone who has an idea what I do wrong?

[shraddha_g]

Hi Wouter,

Which Qliksense Version you are using?

And what role you are assigning to users?

[trappersw]

Qlik Sense 3.0.1, the users are end users. No role is assigned.