The security rule editor

You can create new security rules in the Security rule editor.

Do the following:

1. Select Security rules on the QMC start page or from the StartS drop-down menu to display the overview.
2. Click PCreate new or select an existing rule and click Edit.

The security rules editor has several properties. You can create basic security rules, or use the Conditions field in the Advanced section to edit the rule details and create more advanced security rules, or you can write the rule directly in the Conditions text box.

When do I use the Basic section?

The Basic section provides an efficient way to either create:

• Rules that apply to one resource type only
• The base for more advanced rules

Creating rules for one resource type only

Using the Create from template drop down (in the Identification section) to select a resource type, will set the Resource filter (in the Advanced section) to that selection. It will also automatically generate a resource filter that explicitly points out that resource type. For example, selecting App access rule will set the resource filter to App_*. This means that the QMC will only evaluate the rule for apps. See Naming resources in the Resource filter.

However, you cannot select more than one resource type from the basic view. If you want to add more resource types to the resource filter, or the resource conditions, you must edit the Resource filter and Conditions fields in the Advanced section.

Creating a base for more advanced rules

You can use the Basic section to quickly create the base for a rule. For example, you can define one resource type to apply the rule to and then a set of conditions that you will manipulate with operators other than AND/OR in the Conditions text field in the Advanced section. Using the Advanced section also enables you to use the built-in functions provided with the editor. See Functions for conditions.

Backtracking between the Advanced and Basic sections

To enable synchronization between the Basic and Advanced sections (so called backtracking), extra parenthesis are added to conditions created using the Basic section. Similarly, a user definition with an empty condition is automatically included in the Conditions text field if you add a resource using the Basic section. However, if you create your rule using the Advanced section only, and do not need backtracking, you do not need to follow these conventions.