Unable to disable publish bookmark option using security rules

[Ezhil]

Hi Team,

We got a requirement to disable publish bookmark options for particular set of users. We checked in multiple community articles and tweaked “Custom_CreateAppObjects” security in various ways but nothing seems to be working. Is it possible to disable the publish bookmarks option for particular set of users in Qliksense? Now the publish bookmarks option is visible to all the users.

Any help is much appreciated.

Thanks & Regards,
Ezhil

[mpc · Accepted solution]

Hi, Did you disable the Security Rule "OwnerPublishAppObject" ? This one allows owner to publish their own sheets or bookmarks. 

Create a new one with this definition: 

resource.IsOwned() and resource.owner = user and resource.approved = "false" and resource.objectType  resource.app.stream.HasPrivilege("publish") and resource.objectType != "bookmark" 

And one to allow specific users to publish their own bookmark: 

resource.IsOwned() and resource.owner = user and resource.approved = "false" and resource.objectType  resource.app.stream.HasPrivilege("publish") and resource.objectType = "bookmark" and (user.id="a" or user.id = "b") //Adapt with a custom properties or AD Group

Regards