Hi,
I am working on a new security rule for App Level Security.
I want that users can only see the apps without a custom property "LDAP".
And my second step will be, that users can see those apps, when they have the right custom property.
So I changed the rule "Stream" to this:
(
resource.resourcetype = "App"
and resource.stream.HasPrivilege("read")
and resource.@LDAP.Empty()
)
or
(
(
resource.resourcetype = "App.Object"
and resource.published ="true"
and resource.objectType != "app_appscript"
and resource.objectType != "loadmodel"
)
and resource.app.stream.HasPrivilege("read")
)
This works, but not really.
My user cannot see a specific app, because this user has not the right custom property. So, this is good.
But the problem is, that he also cannot see published sheets in all apps.
