# ExpressionPermissionProfileType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

Specifies restrictions and permissions for various evaluators, especially for scripting expressions. The permission profile configuration is a separate container with its own identifier as it is expected that the same setting will be applied to many evaluators and/or scripting languages. And the definition of a profile can be quite long and extensive.

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
$itemDefinition.Name.LocalPart | property string | [1,1] | Profile identifier.
$itemDefinition.Name.LocalPart | property string | [0,1] | Free-form description (comment).
$itemDefinition.Name.LocalPart | property AuthorizationDecisionType | [1,1] | Default decision for the profile.
$itemDefinition.Name.LocalPart | container ExpressionPermissionPackageProfileType | [0,-1] | Detailed specification for access to a class.
$itemDefinition.Name.LocalPart | container ExpressionPermissionClassProfileType | [0,-1] | Detailed specification for access to a class.

- ### Items

  - #### $itemDefinition.Name.LocalPart

    Flags: RAM,runtime

    Multiplicity: [1,1]

    Profile identifier. Usually short string, essentialy a simple profile name. Custom profiles should consider using URIs instead of simple names to avoid conflicts with built-in profiles that may be provided in later versions.

  - #### $itemDefinition.Name.LocalPart

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Free-form description (comment).

  - #### $itemDefinition.Name.LocalPart

    Flags: RAM,runtime,AVals:2

    Multiplicity: [1,1]

    Default decision for the profile. I.e. decision of those aspects of the profile (e.g. classes, permissions) that are not explicitly enumerated.

  - #### $itemDefinition.Name.LocalPart

    Flags: RAM,runtime

    Multiplicity: [0,-1]

    Detailed specification for access to a class.

  - #### $itemDefinition.Name.LocalPart

    Flags: RAM,runtime

    Multiplicity: [0,-1]

    Detailed specification for access to a class.