search

eapowertools-archive / iPortal

Unsupported - Qlik Sense Impersonation Portal
https://github.com/eapowertools/iPortal/blob/master/docs/gss_setup_guide.md
17 stars 12 forks source link

Root admins can edit published sheets #18

Closed dustinbaxa closed 8 years ago

dustinbaxa commented 8 years ago

I'm not sure if this is intended behavior or a bug but I wanted to post it. After installing iPortal, the RootAdmin(s) can completely edit published apps (edit published sheets, reload data, etc.) within the hub without needing to duplicate to "My Work". In my opinion, this would not be a best practice in a production environment. In order to fix this so that the RootAdmin cannot edit published sheets, I had to disable the rule:

_gss – Root Admin Group Rule

and also change the resource filter of the rule:

_gss – Create App

from App* to App_*.

levi-turner commented 8 years ago

_gss – Root Admin Group Rule doesn't allow you to edit published apps unless the context is QMC and Hub (or Hub only)

It looks like gss – Create App has been stealth edited to be App_* rather than App*.

goldbergjeffrey commented 8 years ago

Yes, this issue is resolved in the documentation.