Define the resource and/or user conditions that the rule should apply to.
Syntax:
[resource.resourcetype = "resourcetypevalue"] [OPERATOR] [(((<resource.property = propertyvalue) [OPERATOR (resource.property = propertyvalue)))]
If you select a resource and a resource condition from the drop-down list in the Basic view, the Conditions field in the Advanced view is automatically filled in with corresponding code for the selected resource type.
Conditions are defined using property-value pairs. You are not required to specify resource or user conditions. In fact, you can leave the Conditions field empty.
The order that you define conditions does not matter. This means that you can define the resources first and then the user and/or resource conditions or the other way round. However, it is recommended that you are consistent in the order in which you define resources and conditions as this simplifies troubleshooting.
To enable synchronization between the Basic and Advanced sections (so called backtracking), extra parenthesis are added to conditions created using the Basic section. Similarly, a user definition with an empty condition is automatically included in the Conditions text field if you add a resource using the Basic section. However, if you create your rule using the Advanced section only, and do not need backtracking, you do not need to follow these conventions.
Arguments:
| Argument | Description |
|---|---|
| resource | Implies that the conditions will be applied to a resource. |
| resourcetype | Implies that the conditions will be applied to a resource of the type defined by the resourcetypevalue. You can also use predefined functions for conditions to return property values. |
| resourcetypevalue | You must provide at least one resource type value. |
| property | The property name for the resource condition. See Properties: for available names. |
| propertyvalue | The value of the selected property name. |
| user | Implies that the conditions will be applied to a user. |
Properties:
| Property name | Available in | Description |
|---|---|---|
| @<customproperty> | App, App.Object, DataConnection, ReloadTask, ServerNodeConfiguration, Stream, Task | The custom property associated with the resource. |
| resource.@<customproperty> | App.Object, ReloadTask | The custom property associated with the resource. |
| app.name | App.Object, ReloadTask | The name of the associated app. |
| app.owner.@<customproperty> | ReloadTask | The custom property associated to the stream of an app. See the corresponding owner property for a description. |
| app.owner.email | ReloadTask | Owner property associated with the app. See the corresponding owner property for a description. |
| app.owner.environment.browser | ReloadTask | Owner property associated with the app. See corresponding owner property for description. |
| app.owner.environment.context | ReloadTask | Owner property associated with the app. See corresponding owner property for description. |
| app.owner.environment.device | ReloadTask | Owner property associated with the app. See corresponding owner property for description. |
| app.owner.environment.ip | ReloadTask | Owner property associated with the app. See corresponding owner property for description. |
| app.owner.environment.os | ReloadTask | Owner property associated with the app. See corresponding owner property for description. |
| app.owner.environment.secureRequest | ReloadTask | Owner property associated with the app. See corresponding owner property for description. |
| app.owner.group | ReloadTask | Owner property associated with the app. See corresponding owner property for description. |
| app.owner.name | ReloadTask | The user name of the owner of the resource. |
| app.owner.userDirectory | ReloadTask | The user directory of the owner of the resource |
| app.owner.userId | ReloadTask | The user id of the owner of the resource |
| app.stream.@<customproperty> | App.Object, ReloadTask | Owner property associated with the app. See corresponding owner property for description. |
| app.stream.name | App.Object, ReloadTask | The name of the associated stream. |
| category | SystemRule | The system rule category: License, Security or Sync. |
| description | User | The description of the owner retrieved from the user directory. |
| User | The email addresses that are available from the connected user directories. | |
| environment.browser | User | Security rule will be applied to the type of browser. Supported browsers: Chrome, Firefox, Safari, MSIE or Unknown. Example 1: Define browser and version: Firefox 22.0 Chrome 33.0.1750.154 Information note If the browser information contains a slash (/), replace it with a space. Example 2: Use the wildcard (*) to include all versions of the browser: environment.browser like Chrome* |
| environment.context | User | Security rule will be applied only to the Qlik Sense environment that the call originates from. Available preset values: ManagementAccess or AppAccess. |
| environment.device | User | Security rule will be applied to the type of device. Available preset values: iPhone, iPad or Default. |
| environment.ip | User | Security rule will be applied to an IP number. |
| environment.os | User | Security rule will be applied to the type of operating system. Available preset values: Windows, Linux, Mac OS X or Unknown. |
| environment.secureRequest | User | Security rule will be applied to the type of request. Available preset values: SSL True or False. |
| group | User | The group memberships of the owner retrieved from the user directory. |
| roles | User | A role that is associated with the user. |
| name | App, App.Object, DataConnection, Extension, License.LoginAccessType, ReloadTask, ServerNodeConfiguration, Stream, User, UserDirectory, UserSyncTask, SystemRule, | The name of the resource or user. |
| objectType | App.Object | The type of app object. Available preset values: story, masterobject, properties, sheet, dimension. |
| owner.@<customproperty> | App, App.Object, DataConnection, Extension, Stream | The custom property associated with the owner of the resource. |
| owner.description | App, DataConnection, Extension, Stream | The description of the owner retrieved from the user directory. |
| owner.email | App, App.Object, DataConnection, Extension, Stream | The email of the owner retrieved from the user directory. |
| owner.environment.browser | App, App.Object, DataConnection, Extension, Stream | The browser environment of the owner of the resource. |
| owner.environment.context | App, App.Object, DataConnection, Extension, Stream | Security rule will be applied only to the Qlik Sense environment that the call originates from. Available preset values: ManagementAccess or AppAccess. |
| owner.environment.device | App, App.Object, DataConnection, Extension, Stream | The device environment of the owner of the resource. |
| owner.environment.ip | App, App.Object, DataConnection, Extension, Stream | The IP environment of the owner of the resource. |
| owner.environment.os | App, App.Object, DataConnection, Extension, Stream | The OS environment of the owner of the resource. |
| owner.environment.secureRequest | App, App.Object, DataConnection, Extension, Stream | Indicates if the sent request is encrypted or not, that is using SSL or not (True or False). |
| owner.group | App, App.Object, DataConnection, Extension, Stream | The group memberships of the owner retrieved from the user directory. |
| owner.name | App, App.Object, DataConnection, Extension, Stream | The user name of the owner of the resource. |
| owner.userDirectory | App, App.Object, DataConnection, Extension, Stream | The user directory of the owner of the resource |
| owner.userId | App, App.Object, DataConnection, Extension, Stream | The user id of the owner of the resource. |
| published | App.Object | The status of the app object. |
| resourceFilter | SystemRule | The existing resource definitions (from the Resource column in the security rules overview). |
| ruleContext | SystemRule | Specifies where the rule is to be applied: Both in hub and QMC, Only in hub, or Only in QMC. |
| stream.@<customproperty> | App | The custom property associated with the stream. |
| stream.name | App | The name of the associated stream. |
| type | SystemRule, DataConnection | The type of security rule or data connection. |
| userid | User | A user’s ID. |
| userdirectory | User | The name of a user directory. |
| userDirectory.name | UserSyncTask | The name of the user directory connection that the user sync task applies to. |
| userDirectory.userDirectoryName | UserSyncTask | The name of the user directory that the user directory connector is connected to. |
| userDirectoryName | UserDirectory | The name of the user directory connection in the QMC. |