Sheets created/duplicated by users are visible to all

[pankajs]

Hi,

We upgraded from Feb 2021 to May 2022.

In Feb version, which ever user duplicated a sheet, it was visible to only his Login. Now, by default, any sheet duplicated by any user is visible to all users under My Sheets section.

We are having 100 users, all are duplicating sheets as per their requirement, and it is turning out very messy for users to read only their sheets.

We have give access of Read, Export Data and Duplicate on Each Stream Rule.

Can anyone suggest how to remove this, so that only Logged In user will see his sheets and NOT other sheets?

Thanks for your support in advance.

Awaiting response.

[rubenmarin]

Hi, the default rules doesn't shows other users personal sheets, only the published or approved sheets are shown to others.

Check if you have any custom rule that allows other users to see unpublished app.objects, they should only see unpublished app.objects if they are the owners of that app object.

In the qmc you can use the audit option, select a sheet and a user that shouldn't see that object, click on audit, and if the R square is green click on it to see the associated rules that are giving the read permission.

[pankajs]

Hello,

Thanks for your suggestion, it helped. I was able to see the associated rules effecting the read permission. But this didn't solve my issue.

I am having 10 different streams, with all users having access to minimum 3 streams. Each stream rule is having Read access to that user.

If look in image above, USER-A created sheet in IT app hosted in Stream "IT", which is access by USER-B as well. Both have read permission. 

But USER-B and USER-A have read permission for Sales Stream as well. Due to this, even though here Stream IT rule is not displayed, but Sales Stream rule is showcased in Associated rule, and hence USER-B is able to see the sheet created by USER-A in IT App in IT Stream.

I removed USER-B from Sales stream to check and the sheet was not visible to him.

But USER-B needs access to Sales and other Stream including IT stream. So he will get more Read Access.

Hence I am still stuck with all users duplicate sheets getting displayed to all users.

The best part is, there are near about 10 streams and 10 such Security Rule for each stream to provide Read access to set of users.

Kindly assist for some solution.

Thanks for your support.

[rubenmarin]

Hi, that screenshot doesn't show the conditions applied by the rule or the resource filter applied, which are key values to know what those rules are doing.

By the default rules users don't see unpublished sheets created by other users, just the published or approved sheets, so there must be something giving that permission.