Allowing the use of specific extension only in specific Apps/streams

[michele_stenico]

Hi,

we need to allow the use of some extensions only in specific apps, that is a User should be able use the extension X in App 1 and not in App2. Specifically we would like to use an  CSV export button only in app without privacy data. 

Is it possible? We checked the security ruies but it seems that the use of extensions can be controlled only by the properties of user and extension buto not by the properties of Apps or Stream where extension used.

Thanks

[treysmithdev]

Yes, this is possible through custom properties, which can be allocated to users, apps, streams, and extensions. If you were to do an app specific rule, this will work:

(user.@ExtensionApp=resource.@ExtensionApp) and ((user.@ExtensionApp=resource.app.@ExtensionApp))

Keep in mind you will have to disable the default rule "Extension".

[michele_stenico]

Hi,
I have tried as you suggested but it doesn't seems to work. I have run these steps:
1) My extensione is named "TableExportButton"
2) Disabled the default rule
3) Created a new rule that allows the user to access to all extension but "TableExportButton"
4) Created a new app with the Extension "TableExportButton” with my admin root user
5) I changed the owner of the app assigned it to a user without administration roles
6) Created a new Custom Properties Extension_Abilitazioni on Apps, Users, Extensions with a value: ExportButton
7) assigned the previous Custom Properties to "TableExportButton" extension, a non published App and the user, owner of App
😎 I have created a new Security Rule with the text: (user.@Extension_Abilitazioni=resource.@Extension_Abilitazioni) and (user.@Extension_Abilitazioni=resource.app.@Extension_Abilitazioni)

Unluckly when the user open the app the extension visualizes permission error
Michele

[treysmithdev]

Try disabling the security rule created in #3 and see if the user has access to it now. If so, it is the confliction of these rules.

[michele_stenico]

Thanks, I tried to disable the security rule #3, however nothing happes.  I couls not understant the problem. Is it possible that is a different version ? I have semptember 2018

THanks

[JaspalDhaliwal]

Hey Treysmithdev

I did get this to work.

However, this requires the @ExtensionApp custom property to be set against relevant users.

Is there a way to omit User and somehow link the Custom Property directly between the Extension and Stream ie a statement like :-

(resource.@ExtensionApp = resource.app.stream.@ExtensionApp))

I expect the security model has User at its core and so this is probably not possible but would be great if it were as it avoids any kind of user maintenance.

[jfkinspari]

Hi @michele_stenico 

Did you ever get the extensions security rule to work?