Working with multiple access rules

Having two rules in a single Access Rules component is equivalent to having two Access Rules components, each with a single rule.

Each Access Rules component can contain multiple rules. You can also have multiple Access Rules components in your pipeline. The way you organize your rules is arbitrary and you can choose whichever organizational method works best for your situation.

Access rules do not support boolean ANDs. However, you can add multiple rules to simulate this effect. For example, these two rules evaluate the same property but give permissions to two different groups.

if language equals english then grant read permissions to canadians

if language equals english then grant read permissions to americans

If language=english for Record A, then both the canadians and americans are given access to Record A. Records that have permissions granted to multiple users or groups will have multiple instances of the Endeca.ACL.Allow.Read property. In this case, Record A would have both Endeca.ACL.Allow.Read=canadians and Endeca.ACL.Allow.Read=americans appended to it.

On the other hand, the following two rules evaluate two different properties but give permissions to the same group. If either of the If statements evaluate to true, the swiss group is granted permission to the record.

if language equals french then grant read permissions to swiss

if language equals german then grant read permissions to swiss