RtDataPolicyRule
Namespace: Meshmakers.Octo.Runtime.Contracts.DataPermissions
One resolved data policy: the CK types it protects, the actions/scope it grants and the role names it is granted to (via its DataPermission's GrantsPermission edges).
public record RtDataPolicyRule : IEquatable<RtDataPolicyRule>
Inheritance Object → RtDataPolicyRule
Implements IEquatable<RtDataPolicyRule>
Properties
PermissionId
Dot-namespaced id of the permission the policy belongs to
public string PermissionId { get; set; }
Property Value
TargetCkTypeIds
Full CK type ids the policy targets; derived types inherit
public IReadOnlyCollection<string> TargetCkTypeIds { get; set; }
Property Value
Actions
Actions the policy grants
public IReadOnlyCollection<RtDataAction> Actions { get; set; }
Property Value
IReadOnlyCollection<RtDataAction>
OwnedOnly
True when the grant is restricted to entities created by the caller
public bool OwnedOnly { get; set; }
Property Value
AuditOnly
True when violations are only logged, nothing is filtered or rejected
public bool AuditOnly { get; set; }
Property Value
GrantedRoleNames
Role names the permission is granted to
public IReadOnlyCollection<string> GrantedRoleNames { get; set; }
Property Value
Constructors
RtDataPolicyRule(String, IReadOnlyCollection<String>, IReadOnlyCollection<RtDataAction>, Boolean, Boolean, IReadOnlyCollection<String>)
One resolved data policy: the CK types it protects, the actions/scope it grants and the role names it is granted to (via its DataPermission's GrantsPermission edges).
public RtDataPolicyRule(string PermissionId, IReadOnlyCollection<string> TargetCkTypeIds, IReadOnlyCollection<RtDataAction> Actions, bool OwnedOnly, bool AuditOnly, IReadOnlyCollection<string> GrantedRoleNames)
Parameters
PermissionId String
Dot-namespaced id of the permission the policy belongs to
TargetCkTypeIds IReadOnlyCollection<String>
Full CK type ids the policy targets; derived types inherit
Actions IReadOnlyCollection<RtDataAction>
Actions the policy grants
OwnedOnly Boolean
True when the grant is restricted to entities created by the caller
AuditOnly Boolean
True when violations are only logged, nothing is filtered or rejected
GrantedRoleNames IReadOnlyCollection<String>
Role names the permission is granted to