Which security rule should the administrator use to meet this requirement?

A system administrator creates a custom property called “dept” and assigns it to users and apps. The value of the custom property are department names such as Accounting, Finance, and IT. Users with the same value for “dept” can see and edit each other’s apps. Users with different values for the property should NOT see each other’s apps.

Which security rule should the administrator use to meet this requirement?
A . Resource: App_*, Stream_*
Conditions: user.@dept=app.@dept
B . Resource: App_*
Conditions: user.@dept=resource.id
C . Resource: App_*
Conditions: user.@dept=resource.@dept
D . Resource: App_*
Conditions: user.@dept=resource.description

Answer: A