I have a stream call ABC, and there is a app call TST, and a user call USR...USR is part of the stream ABC
I have published that TST app to ABC,
In security rule for that stream i have given only read access for the user ABC.
But that ABC user is able to create the sheet in the app TST in hub.
and that sheet which he is creating are getting deleted automatically after 10-15 seconds.
what should i do, that create sheet icon should not even come for the ABC user when he open TST app.