SubjectedObjectSelectorType (Complex Type)

Items

• description

  Flags: RAM,runtime

  Multiplicity: [0,1]

• type

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Type of the object to select.

• subtype

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Subtype of the object to select.

• orgRef

  Flags: RAM

  Multiplicity: [0,1]

  Top node of an organizational hierarchy. This node and all of its subnodes (transitively, unlimited depth) are considered selected.

• filter

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Filter that an object must match to be considered selected by this statement. This filter MUST NOT contain organization unit clauses. It may only contain property clauses, logical operations and so on.

• orgRelation

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Definition of object with respect to subject membership in organizational hierarchy. Used to specify authorizations for all objects that belong to an org where the subject a manager, etc.

• roleRelation

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Definition of object with respect to subject relation to a role. Used to specify authorizations for role approvers, owners and so on.

  EXPERIMENTAL. Use at your own risk.

• archetypeRef

  Flags: RAM

  Multiplicity: [0,-1]

  Definition of object with respect to its archetype.

• special

  Flags: RAM,runtime,AVals:1

  Multiplicity: [0,-1]

  Defines special object by relative description, such as "self".

• allowInactive

  Flags: RAM,runtime

  Multiplicity: [0,1]

  If set to false (default) the specification will apply only to active relations (e.g active delegations). If set to true then the specification will also be applied to inactive relations (e.g. expired delegations). Only partially implemented. Works only for some cases (delegator). EXPERIMENTAL. Use at your own risk.