Bookmark unpublish permission

[Amit_B]

Hi,

Question about QMC security rules:

I created a rule to allow users (analyzers, not apps owners) to publish bookmarks they create so other users can use them:
!resource.App.stream.Empty() and resource.App.HasPrivilege("read") and resource.objectType = "bookmark"
Action: Publish

The issue is that users are also able to unpublish bookmarks, even if the bookmarks created by other users.

How can I change the rule so that only the bookmark creator (also analyzer, not app owner) can unpublish it?

Thanks!

[hugo_andrade · Accepted solution]

Hi @Amit_B !

I love seeing security rule questions! 

So, I will simplify your rule. Since parts of it is already present in other Default rules like CreateAppObjectPublishedApp.

The rule in question needs the following parameters:

• Resource Filter: App.Object_*
• Actions: Publish
• Conditions: ((resource.objectType="bookmark" and resource.owner.userId=user.userId))

If this answer helped you, please mark it as a solution and give it a like.

Thanks!