Skip to main content

Privacera Documentation

NOTE

  • When policy condition is mentioned, it means policy conditions text box (that expects boolean expression) in following places in policy definitions:

  • Policy condition inPolicy Detail in all policy types i.e. Resource Access Policy, Masking Policy, Row Filter Policy and Tag Policy.

image1.png
  • Policy condition inAllow/Deny Policy Items in all policy types i.e. Resource Access Policy, Masking Policy, Row Filter Policy and Tag Policy.

image2.png
  • Some macros (e.g. IS_IN_ANY_GROUP – not described in this document) return boolean value i.e. true or false, they can be directly used in policy conditions, which expect boolean expression.

  • Some macros (all the macros in this document) return non-boolean values i.e. list of Strings with or without quotes separated by comma. These macros can be used in row filter expressions, masking condition expressions and policy conditions also (with some limitations).

  • Policy conditions do not allow use of the Javascript comparison operator “IN”. So if the macros (which return a list of Strings) are to be used in Policy Conditions, they need to be used with the equality operator i.e. “==”.