In our organization, I have created a Consumer that can create bookmarks, but I do not want them to create new sheets. This role should be able to duplicate sheets. How can I write a security rule or modify existing security rule to accommodate with these new changes?
The resource filter is Arc Objects_* with create and read and condition listed below.
!resource.App.stream.Empty() and resource.App.HasPrivilege("read") and (resource.objectType = "userstate" and !user.IsAnonymous() and user.@usertype="Consumer" or resource.objectType = "sheet" or resource.objectType = "story" or resource.objectType = "bookmark" or resource.objectType = "snapshot" or resource.objectType = "embeddedsnapshot" or resource.objectType = "hiddenbookmark")
