Interface sys_security_acl

interface sys_security_acl {
    active: Typed<boolean, { default: true; label: "Active" }>;
    admin_overrides: Typed<
        boolean,
        {
            default: true;
            label: [
                {
                    hint: "Users with admin role override this rule";
                    label: "Admin overrides";
                    plural: "Admin overrides";
                },
            ];
        },
    >;
    advanced: Typed<
        boolean,
        {
            default: false;
            label: [
                {
                    hint: "Show options to control this ACL with references and script. Only use a script when roles and conditions are not sufficient for this ACL.";
                    label: "Advanced";
                    plural: "Advanced";
                },
            ];
        },
    >;
    applies_to: Typed<
        string,
        {
            attributes: { show_condition_count: true };
            dependent: "name";
            label: [
                {
                    hint: "Applies To defines data to which the ACL will be applied";
                    label: "Applies To";
                    plural: "Applies Tos";
                },
            ];
        },
    >;
    condition: Typed<
        string,
        {
            attributes: {
                extended_operators: "IN_SESSION";
                show_condition_count: true;
            };
            dependent: "name";
            label: "Condition";
        },
    >;
    controlled_by_refs: Typed<
        string
        | string[]
        | Record<"sys_dictionary">[],
        {
            attributes: { no_sort: true; slushbucket_ref_no_expand: true };
            cascadeRule: "none";
            label: [
                {
                    hint: "[Record-level ACLs only] Access to the record is controlled by one or more of its reference fields. Remove any fields from this ACL's name to utilize this feature.";
                    label: "Controlled by References";
                    plural: "Controlled by References";
                },
            ];
            referenceKey: "element";
            referenceQual: "javascript:new global.ReferenceQualifierHelper().getQueryConditionForRefs(current.name)";
            referenceTable: "sys_dictionary";
        },
    >;
    decision_type: Typed<
        "allow"
        | "deny",
        {
            choices: {
                allow: { label: "Allow If"; sequence: 1 };
                deny: { label: "Deny Unless"; sequence: 2 };
            };
            default: "allow";
            dropdown: "dropdown_without_none";
            label: [
                {
                    hint: "Decision Type defines whether the ACL should allow access or deny access";
                    label: "Decision Type";
                    plural: "Decision Types";
                },
            ];
        },
    >;
    description: Typed<
        string,
        {
            attributes: { edge_encryption_enabled: true };
            label: "Description";
            maxLength: 4000;
        },
    >;
    local_or_existing: Typed<
        "Local"
        | "Existing",
        {
            choices: {
                Existing: { label: "Existing" };
                Local: { label: "Local" };
            };
            default: "Existing";
            label: "Local or Existing";
        },
    >;
    name: Typed<string, { mandatory: true }>;
    operation: Typed<
        | string
        | ExplicitKey<"sys_security_operation">
        | TableBrand<"sys_security_operation">
        | Record<"sys_security_operation">,
        {
            attributes: { encode_utf8: false; ref_sequence: "order^name" };
            default: "create";
            dropdown: "dropdown_without_none";
            label: "Operation";
            mandatory: true;
            referenceTable: "sys_security_operation";
        },
    >;
    script: Typed<string | ScriptModule<Function>, {}>;
    security_attribute: Typed<
        | string
        | ExplicitKey<"sys_security_attribute">
        | TableBrand<"sys_security_attribute">
        | Record<"sys_security_attribute">,
        {
            attributes: { encode_utf8: false };
            label: "Security Attribute";
            referenceQual: "is_localized=false^type=compound^active=true";
            referenceTable: "sys_security_attribute";
            useReferenceQualifier: "simple";
        },
    >;
    type: Typed<
        | string
        | ExplicitKey<"sys_security_type">
        | TableBrand<"sys_security_type">
        | Record<"sys_security_type">,
        {
            attributes: { encode_utf8: false };
            default: "record";
            dropdown: "dropdown_without_none";
            label: "Type";
            mandatory: true;
            referenceTable: "sys_security_type";
        },
    >;
}