Access condition

The Access Condition component evaluates the access rights of the user of the current session on the object.

Note: In the visibility conditions of the report components, this evaluation can also take place without the component Access condition by directly using an ACL. However, only the access control entry Display of this access control list is then evaluated for the user.

The Access Condition component can be used to evaluate one or more access control entries on the checked object for the user of the session.

This condition can be used, for example, for the availability of reports for the user of a session. Conditional visibility of individual views/chapters based on the user's permissions can also be configured with access conditions.

Configuration:

Property	Description
Logic operation (objects)	If the condition is executed on multiple objects, you can use the Logical operation(Objects) property to determine how the results of the condition (true or false) are linked and evaluated: OR: Condition is true if one of the results or all results are true. AND: Condition is true if all results are true. Exclusive OR: Condition is true if one of the results is true and the rest are false.
Queries	You can create a query here which determines the objects for which the condition is evaluated. If the condition is to be executed on objects that are referenced in another object, you can create a query here that determines the corresponding objects.
Access Control Entries	Select an access control entry here that will be checked for the current user on the object. If the user has the selected permission on the object, the condition is true.
Logic operator (permissions)	Select the logical link for the authorization check of the access control entries here.
User is Administrator	If this option is enabled, users with administrator rights will have access.
Variables	You can activate the enabled attributes of a query and condition in the Variables property so that they can be changed by users at the time of execution. See also: Chapter Variables.

Example: Filtering objects via access condition

The access condition can be used to filter objects on which the access rights of the currently logged-in user are evaluated.

Configuration:

Under Queries, a recursive reference query is created that contains an access condition configured as follows:

Access control entry: Display
Logic operation (objects): OR

Result:

The selected access control entry is evaluated on the objects returned from the reference query. The final result consists of all true intermediate results.