Is above rule working for you?
Resource Type is used to specify that the rule is applied ONLY to App, Stream, Sheet and App Object.
There are many other Resource Types and Resource Object Types
Ex: "snapshot" or "story" or "masterobject" etc.
In your rule it says,
Give access to those who has name like My* for App or Stream or App Object AND Sheet.
AND here is interpreted as ONLY.
Not sure if I this is the answer you looking for?