How to Exclude Access to Values

Sometimes you need to exclude a short list of values, as opposed to creating a long list of values to allow the user to see. This can be achieved with a filter expression in the access block. For example:

access {
   file-access {  
     allow-read
   }
   cbase-access {
     limit-rows-by-filter {
        filter `not(user_property_contains("property name", value("column name")))`
     }
   }
}

This script assumes that you are storing a list of values in the cBase's column name to exclude as a User Property (property name in this example). The filter expression is run on each record in the cBase, keeping each row that matches the filter criteria.