Is it possible to control Stream visibility based on App access?

[EmmaDoherty]

Currently we have a two level security system in our Enterprise environment as I suspect many do.  We have security rules for streams and security rules for apps.

What I would like is the ability to have streams visible based on access to apps within them. 

So if Bob can access App1 (published to the Finance stream), and Fred can access App2 (published to the Sales stream), then Bob should be able to see the Finance stream, and Fred the Sales stream without specifically tagging those streams (or building a separate security rule for them).

I know the default rule gives access to apps if you grant access to the stream. Is it possible to essentially create that in reverse? 

Thanks! Emma

[Jay_Brown · Accepted solution]

Hello @EmmaDoherty ,

Please see the following discussion, it does a pretty good job explaining the limitation:
https://community.qlik.com/t5/Deployment-Management/Security-Rules-Access-stream-if-have-access-to-a...

With that said, you can always request that this type of feature be added here:
https://community.qlik.com/t5/Suggest-an-Idea/idb-p/qlik-ideas

Click on Suggest an idea and post your request.

Hope that helps!