OwnedObjectSelectorType (Complex Type)

Items

• description

  Flags: RAM,runtime

  Multiplicity: [0,1]

• type

  Flags: RAM,runtime

  Multiplicity: [0,1]

• subtype

  Flags: RAM,runtime

  Multiplicity: [0,1]

• orgRef

  Flags: RAM

  Multiplicity: [0,1]

  Top node of an organizational hierarchy. This node and all of its subnodes (transitively, unlimited depth) are considered selected.

• filter

  Flags: RAM,runtime

  Multiplicity: [0,1]

• orgRelation

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Definition of object with respect to subject membership in organizational hierarchy. Used to specify authorizations for all objects that belong to an org where the subject a manager, etc.

• roleRelation

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Definition of object with respect to subject relation to a role. Used to specify authorizations for role approvers, owners and so on.

  EXPERIMENTAL. Use at your own risk.

• special

  Flags: RAM,runtime,AVals:1

  Multiplicity: [0,-1]

• allowInactive

  Flags: RAM,runtime

  Multiplicity: [0,1]

  If set to false (defaul) the specification will apply only to active relations (e.g active delegations). If set to true then the specificaiton will also be applied to inactive relations (e.g. expired delegations). Only partially implemented. Works only for some cases (delegator). EXPERIMENTAL. Use at your own risk.

• owner

  Flags: RAM,runtime

  Multiplicity: [0,1]

  The object matches the specification if it has an owner specified by this element. The "owner" means a focus that has a link to the object.

• delegator

  Flags: RAM,runtime

  Multiplicity: [0,1]

  The object matches the specification if it has a delegator specified by this element. The "delegator" means that the object has an active delegation assignment to delegator. LIMITATION: only "self" delegator is supported now.