# SubjectedObjectSelectorType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

Supertype: ObjectSelectorType
Selects some objects from all the objects in midPoint. This is an extension of ObjectSelectorType that adds criteria that relate objects to a specific subject (logged-in user).

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
description | property string | [0,1] |
type | property QName | [0,1] | Type of the object to select.
subtype | property string | [0,1] | Subtype of the object to select.
orgRef | reference ObjectReferenceType | [0,1] | Top node of an organizational hierarchy.
filter | property SearchFilterType | [0,1] | Filter that an object must match to be considered selected by this statement.
orgRelation | container OrgRelationObjectSpecificationType | [0,1] | Definition of object with respect to subject membership in organizational hierarchy.
roleRelation | container RoleRelationObjectSpecificationType | [0,1] | Definition of object with respect to subject relation to a role.
special | property SpecialObjectSpecificationType | [0,-1] |
allowInactive | property boolean | [0,1] | If set to false (default) the specification will apply only to active relations (e.

- ### Items

  - #### description

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### type

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Type of the object to select.

  - #### subtype

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Subtype of the object to select.

  - #### orgRef

    Flags: RAM

    Multiplicity: [0,1]

    Top node of an organizational hierarchy. This node and all of its subnodes (transitively, unlimited depth) are considered selected.

  - #### filter

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Filter that an object must match to be considered selected by this statement. This filter MUST NOT contain organization unit clauses. It may only contain property clauses, logical operations and so on.

  - #### orgRelation

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Definition of object with respect to subject membership in organizational hierarchy. Used to specify authorizations for all objects that belong to an org where the subject a manager, etc.

  - #### roleRelation

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Definition of object with respect to subject relation to a role. Used to specify authorizations for role approvers, owners and so on.

    EXPERIMENTAL. Use at your own risk.

  - #### special

    Flags: RAM,runtime,AVals:1

    Multiplicity: [0,-1]

  - #### allowInactive

    Flags: RAM,runtime

    Multiplicity: [0,1]

    If set to false (default) the specification will apply only to active relations (e.g active delegations). If set to true then the specification will also be applied to inactive relations (e.g. expired delegations). Only partially implemented. Works only for some cases (delegator). EXPERIMENTAL. Use at your own risk.