WhoAbacRule

Represents a single ABAC rule for the WHO items of an access control.

type WhoAbacRule {
  id: ID!
  promiseDuration: Duration
  rule: AbacComparisonExpression
  type: AccessWhoItemType!
}

Fields

id ● ID! non-null scalar

promiseDuration ● Duration scalar

In case type=WhoPromise, this indicates the duration of the promise.

rule ● AbacComparisonExpression union

The boolean expression defining the ABAC rule.

type ● AccessWhoItemType! non-null enum

Determines whether the users from this ABAC rule will get access granted directly or only a promise (pre-approval).

Member Of

AccessControl object ● ModifiedWhoAbacRules object