Unexpected User Access

[JonSchwans]

New to QLIK Sense security.

I have set up the stream so user can NOT see the stream when viewing through the hub.  If I provide user with a link to an app within the stream the app opens for the user.

I have tried disabling "Stream" default security rule and creating custom rule on the stream but user can still open the app.

How do I prevent this from happening.

[mbespartochnyy · Accepted solution]

You likely have a security rule that is giving user access to the app.

A user doesn't need to have access to a stream where an app is published to have access to an app. User just needs access to an app. If there's a security rule that is giving user access to the app, that's how they get access to it.

I recommend using the Audit section in QMC and filter for the app and user that you are working with to see which security rule is permitting that user access to the app.