api/me.ahoo.wow.api.access/AccessScope/ownerAndSpace

ownerAndSpace

fun ownerAndSpace(caller: Caller, ownership: Ownership = Ownership.OWNER): AccessPredicate

The default rule of caller (ScopeAccess): the aggregates whose owner is the owner of the scope the caller acts in and whose space is its space, each part compared only when the scope names it, and no owner for an aggregate of its tenant (ownership). A policy replaces the default rule for its aggregate, so one that keeps the aggregates to their owner and space combines its own attributes with this: allOf(DocumentStateAccess.APP eq caller.app, ownerAndSpace(caller)).