ObjectsWithIdentityPropertyMatch Class

The access modifier controls access to data objects of an unspecified type (for example 'Roles'). It is only to be used in views as it has no access calculation logic (only load-option modification!). An object is accessible to a user if: - he has an identity (if not an error is thrown!) - the identity has the same value for a specified property as the object itself (that is, the object must have the very same property with the very same value(s) as the identity) - if the property is a multi-value set- or reference-property just one value need to be in common before it is considered a match

The access modifier requires the parameter MATCHPROPERTY which holds a system name of a property. The MATCHPROPERTY is the one being matched. MATCHPROPERTY must be present on both the Identity DOT as well as the DOT for the objects controlled by the access modifier. There is, however, and exception to this - see IDENTITYPROPERTY for details.

If MATCHPROPERTY is a reference property then the optional parameter IDENTITYPROPERTY can be applied. IDENTITYPROPERTY holds a system name of a reference property present on the Identity DOT. If IDENTITYPROPERTY is specified then the identity's value(s) for IDENTITYPROPERTY will be matched with the objects' value(s) for MATCHPROPERTY.

If MATCHPROPERTY is a reference property then the optional parameter INCLUDEIDENTITYVALUEPARENTS can be applied. INCLUDEIDENTITYVALUEPARENTS is a boolean indicating whether the parents of the identity values should be included in the match. As an example: if the MATCHPROPERTY states an org. unit and INCLUDEIDENTITYVALUEPARENTS is true then the match will be performed on the identity's org. unit as well as all parent data objects to the org. unit (on all levels up to the root).

OVERRIDEGROUPS parameter can be spcified with a list of user group UIds, if the active user is a member of any of these specified groups then the access modifier is overriden

The match property must be either: - a set property - a reference property - a value property w. datatype 'text' or 'integer'