Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The rights granted in a role of the yuuvis® RAD rights management can be accompanied by a clause that further refines them. The clause represents the "where ..." part of an eSQL statement. So any clause will be constructed as follows: "select * from dms:typename where <clause>". This page gives you examples of the possible clauses that can be used in this context.
It is important to know that the rights controlling the visibility of an object - 'Available' and 'Display' - will be precompiled and written to the Elasticsearch database. Thus, statements with dynamic parts such as currentuserid() or dateadd() will not work for these rights!

...

Statement

Description

sysitemid = id'ED01B5E5996648088D0A474C37962C93'

The right will be granted to the object (of the corresponding object type) that has the item ID "ED01B5E5996648088D0A474C37962C93"

longnumber = 123456789LThe right will be granted to all objects (of the corresponding object type) where the field "longnumber" has the value 123456789.
string1 = 'ipsum'The right will be granted to all objects (of the corresponding object type) where the field "string1" has the value "ipsum".
catalogfield = 'english'The right will be granted to all objects (of the corresponding object type) where the field "catalogfield" has the catalog entry with data value "english".
orderstable containsrowwithcondition(orderstablerecord.order = 'order4711')

The right will be granted to all objects (of the corresponding object type) where the table "orderstable" has a row where the column order has the value "order4711". 
This also applies to multi-tagging fields which are technically a table with one column. In this case, any chip has to have the value "order4711".

field1='value1' and exists (select 1 from folder f where f isParentOf doctype and f.folderfield = 'value2')The right will be granted to all objects of the type 'doctype' where the field 'field1' has the value 'value1' and where it's parent object (foldertype of technical name 'folder') has the value 'value2' in the field 'folderfield' on the foldertype.
Pay attention that the right side of the 'isParentOf' operator is the technical name of the document-type that you are editing this clause for.