How is operationDomain used in filtering?

[Atlinx]

I assume the object returned by operationDomain function in a security object works like so:

const operationDomain = {
  userId: ["dsfdsf2023f8j3f", /*OR*/ "w023f920sdfdsf", /*OR*/ "fj230f89fjfef" ],
  /*AND*/
  roleCode: ["USER", /*OR*/ "MODERATOR", /*OR*/ "SUPER_ADMIN" ],
  /*AND*/
  ...
}

// Filtered objects must satisfy the following expression:
(userId == "dsfdsf2023f8j3f" || userId == "w023f920sdfdsf" || userId == "fj230f89fjfef")
&& (roleCode == "USER" || roleCode == "MODERATOR" || roleCode == "SUPER_ADMIN")
&& ...

Is this assumption correct?

[edobrb]

Yes, you are correct.

This is how the filter is built:

typetta/src/dal/dao/middlewares/securityPolicy/security.middleware.ts

Line 104 in be9ff5e

const domainFilters = operationSecurityDomain && Object.keys(operationSecurityDomain).length > 0 ? { $and: Object.entries(operationSecurityDomain).map(([k, v]) => ({ [k]: { in: v } })) } : null