Skip to content

Commit 1796982

Browse files
Update modules/ROOT/pages/authentication-authorization/property-based-access-control.adoc
Co-authored-by: Reneta Popova <[email protected]>
1 parent 1ce97a7 commit 1796982

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

modules/ROOT/pages/authentication-authorization/property-based-access-control.adoc

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -106,7 +106,9 @@ GRANT READ {*} ON GRAPH * FOR (n) WHERE n.createdAt > date() TO regularUsers
106106
----
107107
[NOTE]
108108
====
109-
The `date()` function will be evaluated and the value used to evaluate the privilege will be the date at the time the property-based privilege was created. Bear this in mind when designing your property rules and make use of the `SHOW PRIVILEGES AS COMMANDS` command to check what the stored value is. This is essential when revoking property-based privileges containing evaluated function values like `date()`.
109+
The `date()` function is evaluated, and the value used to evaluate the privilege is the date when the property-based privilege is created.
110+
Keep this in mind when designing your property rules, and use the `SHOW PRIVILEGES AS COMMANDS` command to check the stored value.
111+
This is essential when revoking property-based privileges containing evaluated function values like `date()`.
110112
====
111113
[NOTE]
112114
====

0 commit comments

Comments
 (0)