I am trying to grant access to specific users to be able to publish to a specific stream (and the specific stream only).
My rule is as follows:
((user.name="User name") and (resource.stream.@DefaultUser="Stream name" or resource.owner.@DefaultUser="User name"))
This works for new apps, but when I try to publish over an existing app I get 'insufficient priveleges".
They also cannot duplicate from the QMC (but can in the Hub).