Name | Type | Multiplicity | Description |
---|---|---|---|
description |
property string |
[0,1] | |
type |
property QName |
[0,1] | Type of the object to select. |
subtype |
property string |
[0,1] | Subtype of the object to select. |
orgRef |
reference ObjectReferenceType |
[0,1] | Top node of an organizational hierarchy. |
filter |
property SearchFilterType |
[0,1] | Filter that an object must match to be considered selected by this statement. |
orgRelation |
container OrgRelationObjectSpecificationType |
[0,1] | Definition of object with respect to subject membership in organizational hierarchy. |
roleRelation |
container RoleRelationObjectSpecificationType |
[0,1] | Definition of object with respect to subject relation to a role. |
special |
property SpecialObjectSpecificationType |
[0,-1] | |
allowInactive |
property boolean |
[0,1] | If set to false (default) the specification will apply only to active relations (e. |
owner |
container SubjectedObjectSelectorType |
[0,1] | The object matches the specification if it has an owner specified by this element. |
delegator |
container SubjectedObjectSelectorType |
[0,1] | The object matches the specification if it has a delegator specified by this element. |
requester |
container SubjectedObjectSelectorType |
[0,1] | The object matches the specification if it has a requester specified by this element. |
assignee |
container SubjectedObjectSelectorType |
[0,1] | The object matches the specification if it has a (current) assignee specified by this element. |
relatedObject |
container SubjectedObjectSelectorType |
[0,1] | The object matches the specification if it has a related object specified by this element. |
tenant |
container TenantSelectorType |
[0,1] | The object matches the specification if it is related to the specified tenant. |
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM
Multiplicity: [0,1]
Top node of an organizational hierarchy. This node and all of its subnodes
(transitively, unlimited depth) are considered selected.
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Definition of object with respect to subject membership in organizational hierarchy.
Used to specify authorizations for all objects that belong to an org where the subject a manager, etc.
Flags: RAM,runtime
Multiplicity: [0,1]
Definition of object with respect to subject relation to a role.
Used to specify authorizations for role approvers, owners and so on.
EXPERIMENTAL. Use at your own risk.
Flags: RAM,runtime,AVals:1
Multiplicity: [0,-1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]