Which Resource in the security rule should be enabled to over right the apps

[usharanirangana]

Hi,

Which Resource in the security rule should be enabled to over right the apps, Please Suggest.

Regards,

Usha

[Levi_Turner]

Do you mean what rights are needed to enable publish and replace functionality in the QMC?

[usharanirangana]

‌yes..

[Levi_Turner]

Using a quick demo:

• Stream:
  • Read and Publish Rights
• Original App (e.g. App_GUID or App_*)
  • Read, Update, Delete
• App to be published:
  • Read, Update, Delete, Publish
• App.Objects belonging to both apps:
  • Read, Update, Delete

Example rule:

• QmcSection_App
• Read
• ((user.name="pandrtest"))

and

• App*
• Read, Update, Delete
• ((resource.resourcetype = "App" and resource.id="a495d8bd-931a-478a-b5e3-9cccdf1e48a4") or ((resource.resourcetype="App.Object" and resource.app.HasPrivilege("read")))) and (user.name = "pandrtest")

The user (pandrtest) owns the app to be published,so they have publish rights on the app to be published from the default OwnerPublishDuplicate rule and its objects from the default OwnerPublishAppObject rule.

If you're receiving an insufficient privileges error message then it's due to App.Objects in all likelihood, so demo that out with a rule like:

• App*
• Read, Update, Delete
• ((resource.resourcetype="App.Object" and resource.app.HasPrivilege("read"))) and (user.name = "pandrtest")