Page History

...

A special case exists for entity lists of entities. Sometimes it is desirable to filter a list of records based upon the user. Treating each record as an artifact and performing permission checks on them one at a time would be inefficient. We need a way to specify a filter.

The entity artifact could support permission "filters" - where a script is run to process a list of records. In those cases, the authorization manager would include the filters in the permission list , - where the key is "filter" and the value is the script or service name. How the filter is implemented is outside the scope of this document.

...