Security rules conditions

The security rules conditions leverage the boolean logic. This means a collection of evaluate to either true or false and based on the combined logic, the result will end up being true or false as well, defining whether the security rule applies to a specific user. The security rules conditions follow symbolic boolean aggregation logic. While an editor exists, it's not very useful for more advanced requirements, and coding is required. This section will explain the last element of ABAC rules.

General structure of a condition

Conditions are defined using so-called property-value pairs. A property is a unique identifier for some item of data, and the value represents the description of it.

The general structure of a security rule condition looks as follows:

[resource.resourcetype = "resourcetypevalue"] [OPERATOR] [(((resource.property = propertyvalue) [OPERATOR (resource.property = propertyvalue)))]

A typical and condition can look like the following example:

resource.resourcetype...