====== Evaluator (permissions) for users with given form projection who do not have contract in denied organization ======

This evaluator gives permission to IdmIdentity entity, if:

  * Identity is of the selected type (IdmFormProjection).
  * Identity does not have any contract in selected denied organisation. 

===== Contract validity =====

This evaluator does not take contract validity into consideration. This means, that even if user has expired, or DISABLED contract in the denied organisation or its sub-nodes, the evaluator would act as if it was a valid contract and will not give the holder permission to see such identity.

===== Tree node hierarchy =====

When selecting denied organization, keep in mind that not only the selected node, but also all its sub-nodes will be considered as denied.


Example configuration:

{{ :devel:documentation:modules_extras:denied_org.png?600 | Example configuration of IdentityFormProjectionAndOrgEvaluator}}