Resource filters
Collection resources (such as Activities
) can have a filter
section. This section defines criteria the each member of the collection must meet in order to
be accessible. They may be the only criteria that the resource must meet, or they may be in
addition to other criteria added by PolicyCenter. (Filters are
not used for individual element resources because you can use view and edit permissions to
control the availability of an individual resource.)
The filter
section consists of a list of one or more filter expressions. A
filter expression can be:
- A Gosu expression that returns filter criteria, such as gw.rest.core.pl.common.v1.activities.AssignedActivitiesFilter.
- The keyword
__nofilter
, which indicates that there is no filter and all resources are accessible.
For example, the following code defines the filters for the
Accounts
resource (for a collection of accounts) as declared in the
accountholder_core-1.0access.yaml file:
Accounts:
filter: gw.rest.core.pc.account.v1.security.AccountHolderAccountsFilter