Supertype: ObjectSelectorType

Selects some objects from all the objects in midPoint. This is an extension of ObjectSelectorType that adds criteria that relate objects to a specific subject (logged-in user).

Item Summary
Name	Type	Multiplicity	Description
description	property string	[0,1]
type	property QName	[0,1]
subtype	property string	[0,1]
orgRef	reference ObjectReferenceType	[0,1]	Top node of an organizational hierarchy.
filter	property SearchFilterType	[0,1]
orgRelation	container OrgRelationObjectSpecificationType	[0,1]	Definition of object with respect to subject membership in organizational hierarchy.
roleRelation	container RoleRelationObjectSpecificationType	[0,1]	Definition of object with respect to subject relation to a role.
special	property SpecialObjectSpecificationType	[0,-1]
allowInactive	property boolean	[0,1]	If set to false (defaul) the specification will apply only to active relations (e.

Items
- description
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
- type
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
- subtype
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
- orgRef
  
  Flags: RAM
  
  Multiplicity: [0,1]
  
  Top node of an organizational hierarchy. This node and all of its subnodes (transitively, unlimited depth) are considered selected.
- filter
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
- orgRelation
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  Definition of object with respect to subject membership in organizational hierarchy. Used to specify authorizations for all objects that belong to an org where the subject a manager, etc.
- roleRelation
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  Definition of object with respect to subject relation to a role. Used to specify authorizations for role approvers, owners and so on.
  
  EXPERIMENTAL. Use at your own risk.
- special
  
  Flags: RAM,runtime,AVals:1
  
  Multiplicity: [0,-1]
- allowInactive
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  If set to false (defaul) the specification will apply only to active relations (e.g active delegations). If set to true then the specificaiton will also be applied to inactive relations (e.g. expired delegations). Only partially implemented. Works only for some cases (delegator). EXPERIMENTAL. Use at your own risk.