SubjectedObjectSelectorType (Complex Type)

Items

• $itemDefinition.Name.LocalPart

  Flags: RAM,runtime

  Multiplicity: [0,1]

• $itemDefinition.Name.LocalPart

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Type of the object to select.

• $itemDefinition.Name.LocalPart

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Subtype of the object to select.

• $itemDefinition.Name.LocalPart

  Flags: RAM

  Multiplicity: [0,1]

  Top node of an organizational hierarchy. This node and all of its subnodes (transitively, unlimited depth) are considered selected.

• $itemDefinition.Name.LocalPart

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Filter that an object must match to be considered selected by this statement. This filter MUST NOT contain organization unit clauses. It may only contain property clauses, logical operations and so on.

• $itemDefinition.Name.LocalPart

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Definition of object with respect to subject membership in organizational hierarchy. Used to specify authorizations for all objects that belong to an org where the subject a manager, etc.

• $itemDefinition.Name.LocalPart

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Definition of object with respect to subject relation to a role. Used to specify authorizations for role approvers, owners and so on.

  EXPERIMENTAL. Use at your own risk.

• $itemDefinition.Name.LocalPart

  Flags: RAM

  Multiplicity: [0,-1]

  Definition of object with respect to its archetype.

• $itemDefinition.Name.LocalPart

  Flags: RAM,runtime,AVals:1

  Multiplicity: [0,-1]

• $itemDefinition.Name.LocalPart

  Flags: RAM,runtime

  Multiplicity: [0,1]

  If set to false (default) the specification will apply only to active relations (e.g active delegations). If set to true then the specification will also be applied to inactive relations (e.g. expired delegations). Only partially implemented. Works only for some cases (delegator). EXPERIMENTAL. Use at your own risk.