WhatAbacRuleInput

Input object for creating and updating WHAT ABAC rules in an access control.

input WhatAbacRuleInput {
  doTypes: [String!]
  globalPermissions: [String!]
  id: ID
  permissions: [String!]
  rule: AbacComparisonExpressionInput!
  scope: [String!]
}

Fields

doTypes ● [String!] list scalar

The data object types that will be matched by this ABAC rule.

globalPermissions ● [String!] list scalar

In case of a grant, the global permissions that will be granted on the data objects matching the ABAC rule.

id ● ID scalar

The optional ID of the ABAC rule to create or update. If not specified a new ID will be generated.

permissions ● [String!] list scalar

In case of a grant, the permissions that will be granted on the data objects matching the ABAC rule.

rule ● AbacComparisonExpressionInput! non-null input

The actual boolean expression to define which data objects to match.

scope ● [String!] list scalar

The list of data objects in which this ABAC rule will apply. Only descendants of these data objects will be considered.

Member Of

AccessControlInput input ● DataObjectFilterInput input ● simulateWhatAbacRuleSummary query