Security rules check if custom property is not set?

[Anonymous]

Dear community,

is it possible to check inside the security rules if a custom property is not set?

I want that users that do not have a custom property for apps see all apps that also do not have a custom property, something like this:

(

(user.@AppLevelMgmt=resource.@AppLevelMgmt)

or

(

(resource.resourcetype = "App" and resource.stream.HasPrivilege("read") and

(user.@AppLevelMgmt=NOTHING SET)

)

)

Please help!

[Anonymous · Accepted solution]

Got the solution at my own, folowing rules work:

(

(user.@AppLevelMgmt=resource.@AppLevelMgmt)

or

(resource.resourcetype = "App" and resource.stream.HasPrivilege("read") and

resource.@AppLevelMgmt.empty()) or ((resource.resourcetype = "App.Object" and

resource.published = "true") and resource.app.stream.HasPrivilege("read"))

)