Applying RLS rules to GIS module

--The following placeholders are qreplaced by values from the
--corresponding RLS configuration columns from the ddm_rls_metadata table
--${jwtAttribute}
--${checkTable}
--${checkColumn}

--If it is a table read request or view that has RLS configured for, the processing starts
if request_params("service") = "WFS"
    and request_params("request") = "getFeature"
    and request_params("typeName") = "registry:"+${checkTable} then

    --Get value ${jwtAttribute} from token
    jwtRLSattribute = get_jwt_payload(${jwtAttribute})

    if jwtRLSattribute is not null then
        --If jwtAttribute is not empty, rlscolumn filter is formed, like 'jwtAttrValue%'
        --jwtAttribute may contain a data array,
        --a condition is added for each value using or
        for i in jwtRLSattribute loop
            if i !=0
                rls_filter =rls_filter + "or"
            end
            rls_filter =rls_filter + "${checkColumn} like '"+jwtRLSattribute[i]+"%25'"
        end
        rls_filter ="("+rls_filter +")"
    else
        --If jwtAttribute is empty, then a response filter without any value is formed
        rls_filter = "1=0"
    end

    if exists request_params("CQL_FILTER") then
        --If the request already had a cql фільтр, take it into parentheses, add RLS filter
        --conditions and replace CQL_FILTER with the filter formed in request parameters
        request_params("CQL_FILTER") = "("+request_params("CQL_FILTER")+") and "+rls_filter
    else
        --If the request didn't have a cql filter, just add your RLS filter into request parameters
        request_params("CQL_FILTER") = rls_filter
    end
end