You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ranger.apache.org by ve...@apache.org on 2019/08/07 18:15:54 UTC

svn commit: r1864664 [10/21] - in /ranger/site/trunk: ./ apidocs/ apidocs/ui/ kms/apidocs/ kms/apidocs/ui/

Modified: ranger/site/trunk/apidocs/resource_PublicAPIsv2.html
URL: http://svn.apache.org/viewvc/ranger/site/trunk/apidocs/resource_PublicAPIsv2.html?rev=1864664&r1=1864663&r2=1864664&view=diff
==============================================================================
--- ranger/site/trunk/apidocs/resource_PublicAPIsv2.html (original)
+++ ranger/site/trunk/apidocs/resource_PublicAPIsv2.html Wed Aug  7 18:15:52 2019
@@ -66,6 +66,7 @@
           <li><a href="#resource_PublicAPIsv2_deletePolicy_DELETE"><abbr title="DELETE /public/v2/api/policy/{id}"><span class="sideoverflow">DELETE /public/v2/api/policy/{id}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_getPolicy_GET"><abbr title="GET /public/v2/api/policy/{id}"><span class="sideoverflow">GET /public/v2/api/policy/{id}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_updatePolicy_PUT"><abbr title="PUT /public/v2/api/policy/{id}"><span class="sideoverflow">PUT /public/v2/api/policy/{id}</span></abbr></a></li>
+          <li><a href="#resource_PublicAPIsv2_getAllRoleNames_GET"><abbr title="GET /public/v2/api/roles/names"><span class="sideoverflow">GET /public/v2/api/roles/names</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_deleteRole_DELETE"><abbr title="DELETE /public/v2/api/roles/{id}"><span class="sideoverflow">DELETE /public/v2/api/roles/{id}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_getRole_GET"><abbr title="GET /public/v2/api/roles/{id}"><span class="sideoverflow">GET /public/v2/api/roles/{id}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_updateRole_PUT"><abbr title="PUT /public/v2/api/roles/{id}"><span class="sideoverflow">PUT /public/v2/api/roles/{id}</span></abbr></a></li>
@@ -80,8 +81,11 @@
           <li><a href="#resource_PublicAPIsv2_getSecurityZone_GET"><abbr title="GET /public/v2/api/zones/{id}"><span class="sideoverflow">GET /public/v2/api/zones/{id}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_updateSecurityZone_PUT"><abbr title="PUT /public/v2/api/zones/{id}"><span class="sideoverflow">PUT /public/v2/api/zones/{id}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_getPoliciesForResource_GET"><abbr title="GET /public/v2/api/policies/{serviceDefName}/for-resource"><span class="sideoverflow">GET /public/v2/api/policies/{serviceDefName}/for-resource</span></abbr></a></li>
+          <li><a href="#resource_PublicAPIsv2_grantRole_PUT"><abbr title="PUT /public/v2/api/roles/grant/{serviceName}"><span class="sideoverflow">PUT /public/v2/api/roles/grant/{serviceName}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_deleteRole_DELETE"><abbr title="DELETE /public/v2/api/roles/name/{name}"><span class="sideoverflow">DELETE /public/v2/api/roles/name/{name}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_getRole_GET"><abbr title="GET /public/v2/api/roles/name/{name}"><span class="sideoverflow">GET /public/v2/api/roles/name/{name}</span></abbr></a></li>
+          <li><a href="#resource_PublicAPIsv2_revokeRoleUsersAndRoles_PUT"><abbr title="PUT /public/v2/api/roles/revoke/{serviceName}"><span class="sideoverflow">PUT /public/v2/api/roles/revoke/{serviceName}</span></abbr></a></li>
+          <li><a href="#resource_PublicAPIsv2_getUserRoles_GET"><abbr title="GET /public/v2/api/roles/user/{user}"><span class="sideoverflow">GET /public/v2/api/roles/user/{user}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_addUsersAndGroups_PUT"><abbr title="PUT /public/v2/api/roles/{id}/addUsersAndGroups"><span class="sideoverflow">PUT /public/v2/api/roles/{id}/addUsersAndGroups</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_removeAdminFromUsersAndGroups_PUT"><abbr title="PUT /public/v2/api/roles/{id}/removeAdminFromUsersAndGroups"><span class="sideoverflow">PUT /public/v2/api/roles/{id}/removeAdminFromUsersAndGroups</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_removeUsersAndGroups_PUT"><abbr title="PUT /public/v2/api/roles/{id}/removeUsersAndGroups"><span class="sideoverflow">PUT /public/v2/api/roles/{id}/removeUsersAndGroups</span></abbr></a></li>
@@ -217,10 +221,12 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 [ {
-  &quot;zoneName&quot; : &quot;...&quot;,
-  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-  &quot;denyPolicyItems&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;resourceSignature&quot; : &quot;...&quot;,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;rowFilterPolicyItems&quot; : [ {
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -228,18 +234,21 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -247,32 +256,19 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
-  } ],
-  &quot;resources&quot; : {
-    &quot;property1&quot; : {
-      &quot;isRecursive&quot; : true,
       &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isExcludes&quot; : true
-    },
-    &quot;property2&quot; : {
-      &quot;isRecursive&quot; : true,
+      &quot;type&quot; : &quot;...&quot;
+    }, {
       &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isExcludes&quot; : true
-    }
-  },
-  &quot;description&quot; : &quot;...&quot;,
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
   &quot;policyItems&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -280,18 +276,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -299,45 +295,20 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
-  } ],
-  &quot;validitySchedules&quot; : [ {
-    &quot;timeZone&quot; : &quot;...&quot;,
-    &quot;endTime&quot; : &quot;...&quot;,
-    &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
-    }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
-    } ],
-    &quot;startTime&quot; : &quot;...&quot;
-  }, {
-    &quot;timeZone&quot; : &quot;...&quot;,
-    &quot;endTime&quot; : &quot;...&quot;,
-    &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;startTime&quot; : &quot;...&quot;
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;isAuditEnabled&quot; : true,
-  &quot;policyPriority&quot; : 12345,
-  &quot;service&quot; : &quot;...&quot;,
+  &quot;policyType&quot; : 12345,
   &quot;allowExceptions&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -345,18 +316,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -364,26 +335,20 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
-  } ],
-  &quot;conditions&quot; : [ {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
+  &quot;service&quot; : &quot;...&quot;,
   &quot;denyExceptions&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -391,18 +356,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -410,22 +375,35 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;rowFilterPolicyItems&quot; : [ {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
+  &quot;conditions&quot; : [ {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  }, {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  } ],
+  &quot;policyPriority&quot; : 12345,
+  &quot;serviceType&quot; : &quot;...&quot;,
+  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;isDenyAllElse&quot; : true,
+  &quot;dataMaskPolicyItems&quot; : [ {
+    &quot;dataMaskInfo&quot; : {
+      &quot;valueExpr&quot; : &quot;...&quot;,
+      &quot;conditionExpr&quot; : &quot;...&quot;,
+      &quot;dataMaskType&quot; : &quot;...&quot;
     },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -433,21 +411,23 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
+    &quot;dataMaskInfo&quot; : {
+      &quot;valueExpr&quot; : &quot;...&quot;,
+      &quot;conditionExpr&quot; : &quot;...&quot;,
+      &quot;dataMaskType&quot; : &quot;...&quot;
     },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -455,26 +435,54 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;name&quot; : &quot;...&quot;,
-  &quot;resourceSignature&quot; : &quot;...&quot;,
-  &quot;dataMaskPolicyItems&quot; : [ {
-    &quot;dataMaskInfo&quot; : {
-      &quot;dataMaskType&quot; : &quot;...&quot;,
-      &quot;conditionExpr&quot; : &quot;...&quot;,
-      &quot;valueExpr&quot; : &quot;...&quot;
+  &quot;validitySchedules&quot; : [ {
+    &quot;recurrences&quot; : [ {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    }, {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    } ],
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;,
+    &quot;startTime&quot; : &quot;...&quot;
+  }, {
+    &quot;recurrences&quot; : [ {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    }, {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    } ],
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;,
+    &quot;startTime&quot; : &quot;...&quot;
+  } ],
+  &quot;resources&quot; : {
+    &quot;property1&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
     },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;property2&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
+    }
+  },
+  &quot;denyPolicyItems&quot; : [ {
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -482,23 +490,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;dataMaskInfo&quot; : {
-      &quot;dataMaskType&quot; : &quot;...&quot;,
-      &quot;conditionExpr&quot; : &quot;...&quot;,
-      &quot;valueExpr&quot; : &quot;...&quot;
-    },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -506,31 +509,33 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
+  &quot;zoneName&quot; : &quot;...&quot;,
   &quot;options&quot; : {
     &quot;property1&quot; : { },
     &quot;property2&quot; : { }
   },
-  &quot;policyType&quot; : 12345,
-  &quot;serviceType&quot; : &quot;...&quot;,
+  &quot;name&quot; : &quot;...&quot;,
+  &quot;isAuditEnabled&quot; : true,
   &quot;version&quot; : 12345,
+  &quot;createTime&quot; : 12345,
+  &quot;isEnabled&quot; : true,
   &quot;createdBy&quot; : &quot;...&quot;,
-  &quot;updatedBy&quot; : &quot;...&quot;,
-  &quot;id&quot; : 12345,
   &quot;guid&quot; : &quot;...&quot;,
-  &quot;updateTime&quot; : 12345,
-  &quot;isEnabled&quot; : true,
-  &quot;createTime&quot; : 12345
+  &quot;id&quot; : 12345,
+  &quot;updatedBy&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345
 } ]
                 </code>
               </pre>
@@ -602,29 +607,34 @@ Accept: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;zoneName&quot; : &quot;...&quot;,
-  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-  &quot;denyPolicyItems&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;accesses&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
-    }, {
+  &quot;resourceSignature&quot; : &quot;...&quot;,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;rowFilterPolicyItems&quot; : [ {
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
+    &quot;accesses&quot; : [ {
+      &quot;type&quot; : &quot;...&quot;,
+      &quot;isAllowed&quot; : true
+    }, {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -632,32 +642,19 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
-  } ],
-  &quot;resources&quot; : {
-    &quot;property1&quot; : {
-      &quot;isRecursive&quot; : true,
       &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isExcludes&quot; : true
-    },
-    &quot;property2&quot; : {
-      &quot;isRecursive&quot; : true,
+      &quot;type&quot; : &quot;...&quot;
+    }, {
       &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isExcludes&quot; : true
-    }
-  },
-  &quot;description&quot; : &quot;...&quot;,
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
   &quot;policyItems&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -665,18 +662,18 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -684,45 +681,20 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
-  } ],
-  &quot;validitySchedules&quot; : [ {
-    &quot;timeZone&quot; : &quot;...&quot;,
-    &quot;endTime&quot; : &quot;...&quot;,
-    &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
-    }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
-    } ],
-    &quot;startTime&quot; : &quot;...&quot;
-  }, {
-    &quot;timeZone&quot; : &quot;...&quot;,
-    &quot;endTime&quot; : &quot;...&quot;,
-    &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;startTime&quot; : &quot;...&quot;
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;isAuditEnabled&quot; : true,
-  &quot;policyPriority&quot; : 12345,
-  &quot;service&quot; : &quot;...&quot;,
+  &quot;policyType&quot; : 12345,
   &quot;allowExceptions&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -730,18 +702,18 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -749,26 +721,20 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
-  } ],
-  &quot;conditions&quot; : [ {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
+  &quot;service&quot; : &quot;...&quot;,
   &quot;denyExceptions&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -776,18 +742,18 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -795,22 +761,35 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;rowFilterPolicyItems&quot; : [ {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
+  &quot;conditions&quot; : [ {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  }, {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  } ],
+  &quot;policyPriority&quot; : 12345,
+  &quot;serviceType&quot; : &quot;...&quot;,
+  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;isDenyAllElse&quot; : true,
+  &quot;dataMaskPolicyItems&quot; : [ {
+    &quot;dataMaskInfo&quot; : {
+      &quot;valueExpr&quot; : &quot;...&quot;,
+      &quot;conditionExpr&quot; : &quot;...&quot;,
+      &quot;dataMaskType&quot; : &quot;...&quot;
     },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -818,21 +797,23 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
+    &quot;dataMaskInfo&quot; : {
+      &quot;valueExpr&quot; : &quot;...&quot;,
+      &quot;conditionExpr&quot; : &quot;...&quot;,
+      &quot;dataMaskType&quot; : &quot;...&quot;
     },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -840,26 +821,54 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;name&quot; : &quot;...&quot;,
-  &quot;resourceSignature&quot; : &quot;...&quot;,
-  &quot;dataMaskPolicyItems&quot; : [ {
-    &quot;dataMaskInfo&quot; : {
-      &quot;dataMaskType&quot; : &quot;...&quot;,
-      &quot;conditionExpr&quot; : &quot;...&quot;,
-      &quot;valueExpr&quot; : &quot;...&quot;
+  &quot;validitySchedules&quot; : [ {
+    &quot;recurrences&quot; : [ {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    }, {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    } ],
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;,
+    &quot;startTime&quot; : &quot;...&quot;
+  }, {
+    &quot;recurrences&quot; : [ {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    }, {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    } ],
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;,
+    &quot;startTime&quot; : &quot;...&quot;
+  } ],
+  &quot;resources&quot; : {
+    &quot;property1&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
     },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;property2&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
+    }
+  },
+  &quot;denyPolicyItems&quot; : [ {
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -867,23 +876,18 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;dataMaskInfo&quot; : {
-      &quot;dataMaskType&quot; : &quot;...&quot;,
-      &quot;conditionExpr&quot; : &quot;...&quot;,
-      &quot;valueExpr&quot; : &quot;...&quot;
-    },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -891,31 +895,33 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
+  &quot;zoneName&quot; : &quot;...&quot;,
   &quot;options&quot; : {
     &quot;property1&quot; : { },
     &quot;property2&quot; : { }
   },
-  &quot;policyType&quot; : 12345,
-  &quot;serviceType&quot; : &quot;...&quot;,
+  &quot;name&quot; : &quot;...&quot;,
+  &quot;isAuditEnabled&quot; : true,
   &quot;version&quot; : 12345,
+  &quot;createTime&quot; : 12345,
+  &quot;isEnabled&quot; : true,
   &quot;createdBy&quot; : &quot;...&quot;,
-  &quot;updatedBy&quot; : &quot;...&quot;,
-  &quot;id&quot; : 12345,
   &quot;guid&quot; : &quot;...&quot;,
-  &quot;updateTime&quot; : 12345,
-  &quot;isEnabled&quot; : true,
-  &quot;createTime&quot; : 12345
+  &quot;id&quot; : 12345,
+  &quot;updatedBy&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345
 }
                 </code>
               </pre>
@@ -928,29 +934,34 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;zoneName&quot; : &quot;...&quot;,
-  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-  &quot;denyPolicyItems&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;accesses&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
-    }, {
+  &quot;resourceSignature&quot; : &quot;...&quot;,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;rowFilterPolicyItems&quot; : [ {
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
+    &quot;accesses&quot; : [ {
+      &quot;type&quot; : &quot;...&quot;,
+      &quot;isAllowed&quot; : true
+    }, {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -958,32 +969,19 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
-  } ],
-  &quot;resources&quot; : {
-    &quot;property1&quot; : {
-      &quot;isRecursive&quot; : true,
       &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isExcludes&quot; : true
-    },
-    &quot;property2&quot; : {
-      &quot;isRecursive&quot; : true,
+      &quot;type&quot; : &quot;...&quot;
+    }, {
       &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isExcludes&quot; : true
-    }
-  },
-  &quot;description&quot; : &quot;...&quot;,
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
   &quot;policyItems&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -991,18 +989,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1010,45 +1008,20 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
-  } ],
-  &quot;validitySchedules&quot; : [ {
-    &quot;timeZone&quot; : &quot;...&quot;,
-    &quot;endTime&quot; : &quot;...&quot;,
-    &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
-    }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
-    } ],
-    &quot;startTime&quot; : &quot;...&quot;
-  }, {
-    &quot;timeZone&quot; : &quot;...&quot;,
-    &quot;endTime&quot; : &quot;...&quot;,
-    &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;startTime&quot; : &quot;...&quot;
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;isAuditEnabled&quot; : true,
-  &quot;policyPriority&quot; : 12345,
-  &quot;service&quot; : &quot;...&quot;,
+  &quot;policyType&quot; : 12345,
   &quot;allowExceptions&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1056,18 +1029,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1075,26 +1048,20 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
-  } ],
-  &quot;conditions&quot; : [ {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
+  &quot;service&quot; : &quot;...&quot;,
   &quot;denyExceptions&quot; : [ {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1102,18 +1069,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1121,22 +1088,35 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;rowFilterPolicyItems&quot; : [ {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
+  &quot;conditions&quot; : [ {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  }, {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  } ],
+  &quot;policyPriority&quot; : 12345,
+  &quot;serviceType&quot; : &quot;...&quot;,
+  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;isDenyAllElse&quot; : true,
+  &quot;dataMaskPolicyItems&quot; : [ {
+    &quot;dataMaskInfo&quot; : {
+      &quot;valueExpr&quot; : &quot;...&quot;,
+      &quot;conditionExpr&quot; : &quot;...&quot;,
+      &quot;dataMaskType&quot; : &quot;...&quot;
     },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1144,21 +1124,23 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
+    &quot;dataMaskInfo&quot; : {
+      &quot;valueExpr&quot; : &quot;...&quot;,
+      &quot;conditionExpr&quot; : &quot;...&quot;,
+      &quot;dataMaskType&quot; : &quot;...&quot;
     },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1166,26 +1148,54 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;name&quot; : &quot;...&quot;,
-  &quot;resourceSignature&quot; : &quot;...&quot;,
-  &quot;dataMaskPolicyItems&quot; : [ {
-    &quot;dataMaskInfo&quot; : {
-      &quot;dataMaskType&quot; : &quot;...&quot;,
-      &quot;conditionExpr&quot; : &quot;...&quot;,
-      &quot;valueExpr&quot; : &quot;...&quot;
+  &quot;validitySchedules&quot; : [ {
+    &quot;recurrences&quot; : [ {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    }, {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    } ],
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;,
+    &quot;startTime&quot; : &quot;...&quot;
+  }, {
+    &quot;recurrences&quot; : [ {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    }, {
+      &quot;schedule&quot; : { },
+      &quot;interval&quot; : { }
+    } ],
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;,
+    &quot;startTime&quot; : &quot;...&quot;
+  } ],
+  &quot;resources&quot; : {
+    &quot;property1&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
     },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;property2&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
+    }
+  },
+  &quot;denyPolicyItems&quot; : [ {
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1193,23 +1203,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;dataMaskInfo&quot; : {
-      &quot;dataMaskType&quot; : &quot;...&quot;,
-      &quot;conditionExpr&quot; : &quot;...&quot;,
-      &quot;valueExpr&quot; : &quot;...&quot;
-    },
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1217,31 +1222,33 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;delegateAdmin&quot; : true,
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
+  &quot;zoneName&quot; : &quot;...&quot;,
   &quot;options&quot; : {
     &quot;property1&quot; : { },
     &quot;property2&quot; : { }
   },
-  &quot;policyType&quot; : 12345,
-  &quot;serviceType&quot; : &quot;...&quot;,
+  &quot;name&quot; : &quot;...&quot;,
+  &quot;isAuditEnabled&quot; : true,
   &quot;version&quot; : 12345,
+  &quot;createTime&quot; : 12345,
+  &quot;isEnabled&quot; : true,
   &quot;createdBy&quot; : &quot;...&quot;,
-  &quot;updatedBy&quot; : &quot;...&quot;,
-  &quot;id&quot; : 12345,
   &quot;guid&quot; : &quot;...&quot;,
-  &quot;updateTime&quot; : 12345,
-  &quot;isEnabled&quot; : true,
-  &quot;createTime&quot; : 12345
+  &quot;id&quot; : 12345,
+  &quot;updatedBy&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345
 }
                 </code>
               </pre>
@@ -1303,77 +1310,79 @@ Content-Type: application/json
                 <code class="prettyprint language-js">
 {
   &quot;roles&quot; : [ {
-    &quot;groups&quot; : [ {
+    &quot;roles&quot; : [ {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     }, {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     } ],
-    &quot;roles&quot; : [ {
+    &quot;users&quot; : [ {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     }, {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     } ],
-    &quot;options&quot; : {
-      &quot;property1&quot; : { },
-      &quot;property2&quot; : { }
-    },
     &quot;name&quot; : &quot;...&quot;,
-    &quot;users&quot; : [ {
+    &quot;groups&quot; : [ {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     }, {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     } ],
+    &quot;options&quot; : {
+      &quot;property1&quot; : { },
+      &quot;property2&quot; : { }
+    },
+    &quot;createdByUser&quot; : &quot;...&quot;,
     &quot;description&quot; : &quot;...&quot;,
     &quot;version&quot; : 12345,
+    &quot;createTime&quot; : 12345,
+    &quot;isEnabled&quot; : true,
     &quot;createdBy&quot; : &quot;...&quot;,
-    &quot;updatedBy&quot; : &quot;...&quot;,
-    &quot;id&quot; : 12345,
     &quot;guid&quot; : &quot;...&quot;,
-    &quot;updateTime&quot; : 12345,
-    &quot;isEnabled&quot; : true,
-    &quot;createTime&quot; : 12345
+    &quot;id&quot; : 12345,
+    &quot;updatedBy&quot; : &quot;...&quot;,
+    &quot;updateTime&quot; : 12345
   }, {
-    &quot;groups&quot; : [ {
+    &quot;roles&quot; : [ {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     }, {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     } ],
-    &quot;roles&quot; : [ {
+    &quot;users&quot; : [ {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     }, {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     } ],
-    &quot;options&quot; : {
-      &quot;property1&quot; : { },
-      &quot;property2&quot; : { }
-    },
     &quot;name&quot; : &quot;...&quot;,
-    &quot;users&quot; : [ {
+    &quot;groups&quot; : [ {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     }, {
       &quot;name&quot; : &quot;...&quot;,
       &quot;isAdmin&quot; : true
     } ],
+    &quot;options&quot; : {
+      &quot;property1&quot; : { },
+      &quot;property2&quot; : { }
+    },
+    &quot;createdByUser&quot; : &quot;...&quot;,
     &quot;description&quot; : &quot;...&quot;,
     &quot;version&quot; : 12345,
+    &quot;createTime&quot; : 12345,
+    &quot;isEnabled&quot; : true,
     &quot;createdBy&quot; : &quot;...&quot;,
-    &quot;updatedBy&quot; : &quot;...&quot;,
-    &quot;id&quot; : 12345,
     &quot;guid&quot; : &quot;...&quot;,
-    &quot;updateTime&quot; : 12345,
-    &quot;isEnabled&quot; : true,
-    &quot;createTime&quot; : 12345
+    &quot;id&quot; : 12345,
+    &quot;updatedBy&quot; : &quot;...&quot;,
+    &quot;updateTime&quot; : 12345
   } ],
   &quot;listSize&quot; : 12345,
   &quot;list&quot; : [ { }, { } ],
@@ -1396,6 +1405,24 @@ Content-Type: application/json
 
         <p></p>
 
+        <table class="table resource-parameters">
+          <caption>Request Parameters</caption>
+          <thead>
+          <tr>
+            <th>name</th>
+            <th>type</th>
+            <th>description</th>
+          </tr>
+          </thead>
+          <tbody>
+          <tr>
+            <td><span class="parameter-name">serviceName</span></td>
+            <td>query</td>
+            <td><span class="parameter-description"></span></td>
+          </tr>
+          </tbody>
+        </table>
+
         <table class="table resource-request-body">
           <caption>Request Body</caption>
           <thead>
@@ -1454,41 +1481,42 @@ Accept: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;groups&quot; : [ {
+  &quot;roles&quot; : [ {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   }, {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   } ],
-  &quot;roles&quot; : [ {
+  &quot;users&quot; : [ {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   }, {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   } ],
-  &quot;options&quot; : {
-    &quot;property1&quot; : { },
-    &quot;property2&quot; : { }
-  },
   &quot;name&quot; : &quot;...&quot;,
-  &quot;users&quot; : [ {
+  &quot;groups&quot; : [ {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   }, {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   } ],
+  &quot;options&quot; : {
+    &quot;property1&quot; : { },
+    &quot;property2&quot; : { }
+  },
+  &quot;createdByUser&quot; : &quot;...&quot;,
   &quot;description&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
+  &quot;createTime&quot; : 12345,
+  &quot;isEnabled&quot; : true,
   &quot;createdBy&quot; : &quot;...&quot;,
-  &quot;updatedBy&quot; : &quot;...&quot;,
-  &quot;id&quot; : 12345,
   &quot;guid&quot; : &quot;...&quot;,
-  &quot;updateTime&quot; : 12345,
-  &quot;isEnabled&quot; : true,
-  &quot;createTime&quot; : 12345
+  &quot;id&quot; : 12345,
+  &quot;updatedBy&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345
 }
                 </code>
               </pre>
@@ -1501,41 +1529,42 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;groups&quot; : [ {
+  &quot;roles&quot; : [ {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   }, {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   } ],
-  &quot;roles&quot; : [ {
+  &quot;users&quot; : [ {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   }, {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   } ],
-  &quot;options&quot; : {
-    &quot;property1&quot; : { },
-    &quot;property2&quot; : { }
-  },
   &quot;name&quot; : &quot;...&quot;,
-  &quot;users&quot; : [ {
+  &quot;groups&quot; : [ {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   }, {
     &quot;name&quot; : &quot;...&quot;,
     &quot;isAdmin&quot; : true
   } ],
+  &quot;options&quot; : {
+    &quot;property1&quot; : { },
+    &quot;property2&quot; : { }
+  },
+  &quot;createdByUser&quot; : &quot;...&quot;,
   &quot;description&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
+  &quot;createTime&quot; : 12345,
+  &quot;isEnabled&quot; : true,
   &quot;createdBy&quot; : &quot;...&quot;,
-  &quot;updatedBy&quot; : &quot;...&quot;,
-  &quot;id&quot; : 12345,
   &quot;guid&quot; : &quot;...&quot;,
-  &quot;updateTime&quot; : 12345,
-  &quot;isEnabled&quot; : true,
-  &quot;createTime&quot; : 12345
+  &quot;id&quot; : 12345,
+  &quot;updatedBy&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345
 }
                 </code>
               </pre>
@@ -1596,26 +1625,26 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 [ {
-  &quot;tagService&quot; : &quot;...&quot;,
-  &quot;description&quot; : &quot;...&quot;,
   &quot;tagVersion&quot; : 12345,
   &quot;configs&quot; : {
     &quot;property1&quot; : &quot;...&quot;,
     &quot;property2&quot; : &quot;...&quot;
   },
+  &quot;tagService&quot; : &quot;...&quot;,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;policyVersion&quot; : 12345,
   &quot;policyUpdateTime&quot; : 12345,
-  &quot;name&quot; : &quot;...&quot;,
   &quot;type&quot; : &quot;...&quot;,
   &quot;tagUpdateTime&quot; : 12345,
-  &quot;policyVersion&quot; : 12345,
+  &quot;name&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
+  &quot;createTime&quot; : 12345,
+  &quot;isEnabled&quot; : true,
   &quot;createdBy&quot; : &quot;...&quot;,
-  &quot;updatedBy&quot; : &quot;...&quot;,
-  &quot;id&quot; : 12345,
   &quot;guid&quot; : &quot;...&quot;,
-  &quot;updateTime&quot; : 12345,
-  &quot;isEnabled&quot; : true,
-  &quot;createTime&quot; : 12345
+  &quot;id&quot; : 12345,
+  &quot;updatedBy&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345
 } ]
                 </code>
               </pre>
@@ -1687,26 +1716,26 @@ Accept: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;tagService&quot; : &quot;...&quot;,
-  &quot;description&quot; : &quot;...&quot;,
   &quot;tagVersion&quot; : 12345,
   &quot;configs&quot; : {
     &quot;property1&quot; : &quot;...&quot;,
     &quot;property2&quot; : &quot;...&quot;
   },
+  &quot;tagService&quot; : &quot;...&quot;,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;policyVersion&quot; : 12345,
   &quot;policyUpdateTime&quot; : 12345,
-  &quot;name&quot; : &quot;...&quot;,
   &quot;type&quot; : &quot;...&quot;,
   &quot;tagUpdateTime&quot; : 12345,
-  &quot;policyVersion&quot; : 12345,
+  &quot;name&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
+  &quot;createTime&quot; : 12345,
+  &quot;isEnabled&quot; : true,
   &quot;createdBy&quot; : &quot;...&quot;,
-  &quot;updatedBy&quot; : &quot;...&quot;,
-  &quot;id&quot; : 12345,
   &quot;guid&quot; : &quot;...&quot;,
-  &quot;updateTime&quot; : 12345,
-  &quot;isEnabled&quot; : true,
-  &quot;createTime&quot; : 12345
+  &quot;id&quot; : 12345,
+  &quot;updatedBy&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345
 }
                 </code>
               </pre>
@@ -1719,26 +1748,26 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;tagService&quot; : &quot;...&quot;,
-  &quot;description&quot; : &quot;...&quot;,
   &quot;tagVersion&quot; : 12345,
   &quot;configs&quot; : {
     &quot;property1&quot; : &quot;...&quot;,
     &quot;property2&quot; : &quot;...&quot;
   },
+  &quot;tagService&quot; : &quot;...&quot;,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;policyVersion&quot; : 12345,
   &quot;policyUpdateTime&quot; : 12345,
-  &quot;name&quot; : &quot;...&quot;,
   &quot;type&quot; : &quot;...&quot;,
   &quot;tagUpdateTime&quot; : 12345,
-  &quot;policyVersion&quot; : 12345,
+  &quot;name&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
+  &quot;createTime&quot; : 12345,
+  &quot;isEnabled&quot; : true,
   &quot;createdBy&quot; : &quot;...&quot;,
-  &quot;updatedBy&quot; : &quot;...&quot;,
-  &quot;id&quot; : 12345,
   &quot;guid&quot; : &quot;...&quot;,
-  &quot;updateTime&quot; : 12345,
-  &quot;isEnabled&quot; : true,
-  &quot;createTime&quot; : 12345
+  &quot;id&quot; : 12345,
+  &quot;updatedBy&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345
 }
                 </code>
               </pre>
@@ -1800,356 +1829,356 @@ Content-Type: application/json
                 <code class="prettyprint language-js">
 [ {
   &quot;enums&quot; : [ {
+    &quot;name&quot; : &quot;...&quot;,
     &quot;defaultIndex&quot; : 12345,
+    &quot;itemId&quot; : 12345,
     &quot;elements&quot; : [ {
-      &quot;rbKeyLabel&quot; : &quot;...&quot;,
-      &quot;label&quot; : &quot;...&quot;,
+      &quot;itemId&quot; : 12345,
       &quot;name&quot; : &quot;...&quot;,
-      &quot;itemId&quot; : 12345
-    }, {
-      &quot;rbKeyLabel&quot; : &quot;...&quot;,
       &quot;label&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;
+    }, {
+      &quot;itemId&quot; : 12345,
       &quot;name&quot; : &quot;...&quot;,
-      &quot;itemId&quot; : 12345
-    } ],
-    &quot;itemId&quot; : 12345,
-    &quot;name&quot; : &quot;...&quot;
+      &quot;label&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;
+    } ]
   }, {
+    &quot;name&quot; : &quot;...&quot;,
     &quot;defaultIndex&quot; : 12345,
+    &quot;itemId&quot; : 12345,
     &quot;elements&quot; : [ {
+      &quot;itemId&quot; : 12345,
+      &quot;name&quot; : &quot;...&quot;,
+      &quot;label&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;
+    }, {
+      &quot;itemId&quot; : 12345,
+      &quot;name&quot; : &quot;...&quot;,
+      &quot;label&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;
+    } ]
+  } ],
+  &quot;rbKeyLabel&quot; : &quot;...&quot;,
+  &quot;dataMaskDef&quot; : {
+    &quot;resources&quot; : [ {
+      &quot;lookupSupported&quot; : true,
+      &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
+      &quot;validationMessage&quot; : &quot;...&quot;,
+      &quot;itemId&quot; : 12345,
+      &quot;isValidLeaf&quot; : true,
+      &quot;matcher&quot; : &quot;...&quot;,
+      &quot;excludesSupported&quot; : true,
+      &quot;name&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;recursiveSupported&quot; : true,
+      &quot;description&quot; : &quot;...&quot;,
+      &quot;level&quot; : 12345,
+      &quot;uiHint&quot; : &quot;...&quot;,
+      &quot;label&quot; : &quot;...&quot;,
+      &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;matcherOptions&quot; : {
+        &quot;property1&quot; : &quot;...&quot;,
+        &quot;property2&quot; : &quot;...&quot;
+      },
+      &quot;parent&quot; : &quot;...&quot;,
+      &quot;validationRegEx&quot; : &quot;...&quot;,
+      &quot;rbKeyDescription&quot; : &quot;...&quot;,
+      &quot;type&quot; : &quot;...&quot;,
+      &quot;mandatory&quot; : true
+    }, {
+      &quot;lookupSupported&quot; : true,
+      &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
+      &quot;validationMessage&quot; : &quot;...&quot;,
+      &quot;itemId&quot; : 12345,
+      &quot;isValidLeaf&quot; : true,
+      &quot;matcher&quot; : &quot;...&quot;,
+      &quot;excludesSupported&quot; : true,
+      &quot;name&quot; : &quot;...&quot;,
       &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;recursiveSupported&quot; : true,
+      &quot;description&quot; : &quot;...&quot;,
+      &quot;level&quot; : 12345,
+      &quot;uiHint&quot; : &quot;...&quot;,
       &quot;label&quot; : &quot;...&quot;,
+      &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;matcherOptions&quot; : {
+        &quot;property1&quot; : &quot;...&quot;,
+        &quot;property2&quot; : &quot;...&quot;
+      },
+      &quot;parent&quot; : &quot;...&quot;,
+      &quot;validationRegEx&quot; : &quot;...&quot;,
+      &quot;rbKeyDescription&quot; : &quot;...&quot;,
+      &quot;type&quot; : &quot;...&quot;,
+      &quot;mandatory&quot; : true
+    } ],
+    &quot;accessTypes&quot; : [ {
       &quot;name&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;label&quot; : &quot;...&quot;,
+      &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ],
       &quot;itemId&quot; : 12345
     }, {
+      &quot;name&quot; : &quot;...&quot;,
       &quot;rbKeyLabel&quot; : &quot;...&quot;,
       &quot;label&quot; : &quot;...&quot;,
-      &quot;name&quot; : &quot;...&quot;,
+      &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ],
       &quot;itemId&quot; : 12345
     } ],
-    &quot;itemId&quot; : 12345,
-    &quot;name&quot; : &quot;...&quot;
-  } ],
+    &quot;maskTypes&quot; : [ {
+      &quot;description&quot; : &quot;...&quot;,
+      &quot;dataMaskOptions&quot; : {
+        &quot;property1&quot; : &quot;...&quot;,
+        &quot;property2&quot; : &quot;...&quot;
+      },
+      &quot;label&quot; : &quot;...&quot;,
+      &quot;rbKeyDescription&quot; : &quot;...&quot;,
+      &quot;itemId&quot; : 12345,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;name&quot; : &quot;...&quot;,
+      &quot;transformer&quot; : &quot;...&quot;
+    }, {
+      &quot;description&quot; : &quot;...&quot;,
+      &quot;dataMaskOptions&quot; : {
+        &quot;property1&quot; : &quot;...&quot;,
+        &quot;property2&quot; : &quot;...&quot;
+      },
+      &quot;label&quot; : &quot;...&quot;,
+      &quot;rbKeyDescription&quot; : &quot;...&quot;,
+      &quot;itemId&quot; : 12345,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;name&quot; : &quot;...&quot;,
+      &quot;transformer&quot; : &quot;...&quot;
+    } ]
+  },
+  &quot;label&quot; : &quot;...&quot;,
+  &quot;description&quot; : &quot;...&quot;,
   &quot;name&quot; : &quot;...&quot;,
+  &quot;rbKeyDescription&quot; : &quot;...&quot;,
   &quot;contextEnrichers&quot; : [ {
     &quot;enricherOptions&quot; : {
       &quot;property1&quot; : &quot;...&quot;,
       &quot;property2&quot; : &quot;...&quot;
     },
-    &quot;itemId&quot; : 12345,
     &quot;enricher&quot; : &quot;...&quot;,
-    &quot;name&quot; : &quot;...&quot;
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;itemId&quot; : 12345
   }, {
     &quot;enricherOptions&quot; : {
       &quot;property1&quot; : &quot;...&quot;,
       &quot;property2&quot; : &quot;...&quot;
     },
-    &quot;itemId&quot; : 12345,
     &quot;enricher&quot; : &quot;...&quot;,
-    &quot;name&quot; : &quot;...&quot;
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;itemId&quot; : 12345
   } ],
-  &quot;options&quot; : {
-    &quot;property1&quot; : &quot;...&quot;,
-    &quot;property2&quot; : &quot;...&quot;
-  },
-  &quot;resources&quot; : [ {
+  &quot;implClass&quot; : &quot;...&quot;,
+  &quot;policyConditions&quot; : [ {
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;description&quot; : &quot;...&quot;,
+    &quot;evaluatorOptions&quot; : {
+      &quot;property1&quot; : &quot;...&quot;,
+      &quot;property2&quot; : &quot;...&quot;
+    },
     &quot;validationMessage&quot; : &quot;...&quot;,
+    &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
+    &quot;validationRegEx&quot; : &quot;...&quot;,
     &quot;label&quot; : &quot;...&quot;,
-    &quot;excludesSupported&quot; : true,
     &quot;uiHint&quot; : &quot;...&quot;,
-    &quot;isValidLeaf&quot; : true,
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;level&quot; : 12345,
-    &quot;description&quot; : &quot;...&quot;,
-    &quot;rbKeyDescription&quot; : &quot;...&quot;,
-    &quot;recursiveSupported&quot; : true,
-    &quot;lookupSupported&quot; : true,
+    &quot;itemId&quot; : 12345,
     &quot;rbKeyLabel&quot; : &quot;...&quot;,
-    &quot;matcher&quot; : &quot;...&quot;,
-    &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
-    &quot;validationRegEx&quot; : &quot;...&quot;,
-    &quot;mandatory&quot; : true,
-    &quot;parent&quot; : &quot;...&quot;,
+    &quot;rbKeyDescription&quot; : &quot;...&quot;,
+    &quot;evaluator&quot; : &quot;...&quot;
+  }, {
     &quot;name&quot; : &quot;...&quot;,
-    &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;itemId&quot; : 12345,
-    &quot;matcherOptions&quot; : {
+    &quot;description&quot; : &quot;...&quot;,
+    &quot;evaluatorOptions&quot; : {
       &quot;property1&quot; : &quot;...&quot;,
       &quot;property2&quot; : &quot;...&quot;
-    }
-  }, {
+    },
     &quot;validationMessage&quot; : &quot;...&quot;,
-    &quot;label&quot; : &quot;...&quot;,
-    &quot;excludesSupported&quot; : true,
-    &quot;uiHint&quot; : &quot;...&quot;,
-    &quot;isValidLeaf&quot; : true,
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;level&quot; : 12345,
-    &quot;description&quot; : &quot;...&quot;,
-    &quot;rbKeyDescription&quot; : &quot;...&quot;,
-    &quot;recursiveSupported&quot; : true,
-    &quot;lookupSupported&quot; : true,
-    &quot;rbKeyLabel&quot; : &quot;...&quot;,
-    &quot;matcher&quot; : &quot;...&quot;,
     &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
     &quot;validationRegEx&quot; : &quot;...&quot;,
-    &quot;mandatory&quot; : true,
-    &quot;parent&quot; : &quot;...&quot;,
-    &quot;name&quot; : &quot;...&quot;,
-    &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;label&quot; : &quot;...&quot;,
+    &quot;uiHint&quot; : &quot;...&quot;,
     &quot;itemId&quot; : 12345,
-    &quot;matcherOptions&quot; : {
-      &quot;property1&quot; : &quot;...&quot;,
-      &quot;property2&quot; : &quot;...&quot;
-    }
+    &quot;rbKeyLabel&quot; : &quot;...&quot;,
+    &quot;rbKeyDescription&quot; : &quot;...&quot;,
+    &quot;evaluator&quot; : &quot;...&quot;
   } ],
   &quot;accessTypes&quot; : [ {
     &quot;name&quot; : &quot;...&quot;,
-    &quot;label&quot; : &quot;...&quot;,
-    &quot;itemId&quot; : 12345,
     &quot;rbKeyLabel&quot; : &quot;...&quot;,
-    &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;label&quot; : &quot;...&quot;,
+    &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;itemId&quot; : 12345
   }, {
     &quot;name&quot; : &quot;...&quot;,
-    &quot;label&quot; : &quot;...&quot;,
-    &quot;itemId&quot; : 12345,
     &quot;rbKeyLabel&quot; : &quot;...&quot;,
-    &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;label&quot; : &quot;...&quot;,
+    &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;itemId&quot; : 12345
   } ],
-  &quot;rbKeyDescription&quot; : &quot;...&quot;,
-  &quot;description&quot; : &quot;...&quot;,
-  &quot;rbKeyLabel&quot; : &quot;...&quot;,
-  &quot;label&quot; : &quot;...&quot;,
-  &quot;dataMaskDef&quot; : {
-    &quot;accessTypes&quot; : [ {
-      &quot;name&quot; : &quot;...&quot;,
-      &quot;label&quot; : &quot;...&quot;,
-      &quot;itemId&quot; : 12345,
-      &quot;rbKeyLabel&quot; : &quot;...&quot;,
-      &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;name&quot; : &quot;...&quot;,
-      &quot;label&quot; : &quot;...&quot;,
-      &quot;itemId&quot; : 12345,
-      &quot;rbKeyLabel&quot; : &quot;...&quot;,
-      &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
+  &quot;rowFilterDef&quot; : {
     &quot;resources&quot; : [ {
+      &quot;lookupSupported&quot; : true,
+      &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
       &quot;validationMessage&quot; : &quot;...&quot;,
-      &quot;label&quot; : &quot;...&quot;,
-      &quot;excludesSupported&quot; : true,
-      &quot;uiHint&quot; : &quot;...&quot;,
+      &quot;itemId&quot; : 12345,
       &quot;isValidLeaf&quot; : true,
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;level&quot; : 12345,
-      &quot;description&quot; : &quot;...&quot;,
-      &quot;rbKeyDescription&quot; : &quot;...&quot;,
-      &quot;recursiveSupported&quot; : true,
-      &quot;lookupSupported&quot; : true,
-      &quot;rbKeyLabel&quot; : &quot;...&quot;,
       &quot;matcher&quot; : &quot;...&quot;,
-      &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
-      &quot;validationRegEx&quot; : &quot;...&quot;,
-      &quot;mandatory&quot; : true,
-      &quot;parent&quot; : &quot;...&quot;,
+      &quot;excludesSupported&quot; : true,
       &quot;name&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;recursiveSupported&quot; : true,
+      &quot;description&quot; : &quot;...&quot;,
+      &quot;level&quot; : 12345,
+      &quot;uiHint&quot; : &quot;...&quot;,
+      &quot;label&quot; : &quot;...&quot;,
       &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;itemId&quot; : 12345,
       &quot;matcherOptions&quot; : {
         &quot;property1&quot; : &quot;...&quot;,
         &quot;property2&quot; : &quot;...&quot;
-      }
+      },
+      &quot;parent&quot; : &quot;...&quot;,
+      &quot;validationRegEx&quot; : &quot;...&quot;,
+      &quot;rbKeyDescription&quot; : &quot;...&quot;,
+      &quot;type&quot; : &quot;...&quot;,
+      &quot;mandatory&quot; : true
     }, {
+      &quot;lookupSupported&quot; : true,
+      &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
       &quot;validationMessage&quot; : &quot;...&quot;,
-      &quot;label&quot; : &quot;...&quot;,
-      &quot;excludesSupported&quot; : true,
-      &quot;uiHint&quot; : &quot;...&quot;,
+      &quot;itemId&quot; : 12345,
       &quot;isValidLeaf&quot; : true,
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;level&quot; : 12345,
-      &quot;description&quot; : &quot;...&quot;,
-      &quot;rbKeyDescription&quot; : &quot;...&quot;,
-      &quot;recursiveSupported&quot; : true,
-      &quot;lookupSupported&quot; : true,
-      &quot;rbKeyLabel&quot; : &quot;...&quot;,
       &quot;matcher&quot; : &quot;...&quot;,
-      &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
-      &quot;validationRegEx&quot; : &quot;...&quot;,
-      &quot;mandatory&quot; : true,
-      &quot;parent&quot; : &quot;...&quot;,
+      &quot;excludesSupported&quot; : true,
       &quot;name&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;recursiveSupported&quot; : true,
+      &quot;description&quot; : &quot;...&quot;,
+      &quot;level&quot; : 12345,
+      &quot;uiHint&quot; : &quot;...&quot;,
+      &quot;label&quot; : &quot;...&quot;,
       &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;itemId&quot; : 12345,
       &quot;matcherOptions&quot; : {
         &quot;property1&quot; : &quot;...&quot;,
         &quot;property2&quot; : &quot;...&quot;
-      }
-    } ],
-    &quot;maskTypes&quot; : [ {
-      &quot;itemId&quot; : 12345,
-      &quot;transformer&quot; : &quot;...&quot;,
-      &quot;dataMaskOptions&quot; : {
-        &quot;property1&quot; : &quot;...&quot;,
-        &quot;property2&quot; : &quot;...&quot;
       },
-      &quot;name&quot; : &quot;...&quot;,
-      &quot;description&quot; : &quot;...&quot;,
+      &quot;parent&quot; : &quot;...&quot;,
+      &quot;validationRegEx&quot; : &quot;...&quot;,
       &quot;rbKeyDescription&quot; : &quot;...&quot;,
+      &quot;type&quot; : &quot;...&quot;,
+      &quot;mandatory&quot; : true
+    } ],
+    &quot;accessTypes&quot; : [ {
+      &quot;name&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
       &quot;label&quot; : &quot;...&quot;,

[... 11465 lines stripped ...]