Security Rules

Security rules allows you to control the visibility of a resource based on conditions. You can create rules for the following resources:

• Groups

• Users

Understanding rules scope

Once a rule is created, the rule will be applied to any area of the Qommentary Admin Console or any Qommentary Extension where the resource is displayed.

For example, if you setup a rule for groups, then you will be able to see only those groups which meet that condition.

Creating a rule for a group

1. Click on Create rule

2. Enter the rule name and description (optional)

3. Select Group as Resource Type

4. Check the Active check box

The Active check box indicates whether the rule is active or not. The rule is applied only if the check box is checked.

5. In the Actions section, leave the Read option checked

6. Add rule conditions

Field	Description
Logical Operator	Indicates if the conditions are exclusive or inclusive If AND is selected, the conditions are concatenated using the logical operator AND. e.g: Condition1 AND Condition2 AND Condition3 If OR is selected, the conditions are concatenated using the logical operator OR. e.g: Condition1 OR Condition2 OR Condition3 NOTE: AND and OR operators cannot be used on the same rule.
Resource	Indicates the resource that the condition will be targeting
Property	Indicates the Resource property used on the condition
Operator	Indicates the operator used on the condition. Available operators: Equals: indicates that the left hand side value of the expression (LH) has to be equal to the right hand side value of the expression (RH) StartsWith: indicates that LH has to start with the RH value Contains: indicates that LH contains the RH NOTE: operators are case-sensitive
User	Represents the current user logged in when the rule is being evaluated
Attributes	Displays a list of Qlik Sense user attributes

6a. Select the resource property

6b. Select the operator, e.g. Equals

6c. Select user

6d. Select the user attribute, e.g: business_unit

Now if the system needs to display a list of groups, it will interpret the rule as follows: "When the group name is equal to the business unit attribute value from the logged in user Then display the group"

8. To add more conditions, click on the Add condition button and repeat steps 6a to 6.d.

9. Click on Save button

Creating a rule for a user

1. Click on Create rule

2. Enter the rule name and description (optional)

3. Select User as Resource Type

4. Check the Active check box

The Active check box indicates whether the rule is active or not. The rule is applied only if the check box is checked.

5. In the Actions section, leave the Read option checked

6. Add rule conditions

Rule conditions for users are based on the group name of the groups that the user created or belongs to.

7. Click on Save button

Disabling a rule

If you wish to de-activate a security rule when no longer in use, please follow these steps:

1. Click on the the Security Rules left menu option

2. Click on the Edit icon

3. Uncheck the Active check box

4. Click on Save button

Deleting a rule

1. Click on the the Security Rules left menu option

2. Click on the Delete icon

3. A confirmation modal will be displayed. Click on Delete button