This post continues a series of examples on Advanced Expression-Based Filters for Metacoda Plug-ins, in this case for the Protected Object Reviewer.
Here are some expressions that you may find useful to copy and paste into the filter bar of the Metacoda Protected Object Reviewer as a starting point for finding interesting sets of SAS metadata objects that have had access controls, Access Control Templates (or ACTs) and/or Access Control Entries (ACEs or explicit permissions), applied to them:
Protected Tree Branch Objects: show folders and objects, underneath the /Vegas Enterprises metadata tree branch, that have had any ACTs or ACEs applied to them.
#@ path.startsWith("/Vegas Enterprises")
ACT Protected Tree Branch Objects: show folders and objects, underneath the /Vegas Enterprises metadata tree branch, that have had ACTs applied (and optionally ACEs).
#@ path.startsWith("/Vegas Enterprises") && directACTCount > 0
ACE Protected Tree Branch Objects: show folders and objects, underneath the /Vegas Enterprises metadata tree branch, that have had ACEs applied (and optionally ACTs).
#@ path.startsWith("/Vegas Enterprises") && directACECount > 0
ACT-only Protected Tree Branch Objects: show folders and objects, underneath the /Vegas Enterprises metadata tree branch, that have only had ACTs applied (not ACEs).
#@ path.startsWith("/Vegas Enterprises") && directACTCount > 0 && directACECount == 0
ACE-only Protected Tree Branch Objects: show folders and objects, underneath the /Vegas Enterprises metadata tree branch, that have only had ACEs applied (not ACTs).
#@ path.startsWith("/Vegas Enterprises") && directACECount > 0 && directACTCount == 0
Permission Conditioned Objects: show objects that have permission conditions (as used for fine-grained security like OLAP member-level security and BI row-level security).
#@ hasPermissionCondition
The examples above all work with the current Metacoda Plug-ins 6.0 release. If you have any other useful examples that you have used in the Protected Object Reviewer please post them as a comment below.