ash/enforcer.go
func AddFilter(filter bson.M) *Enforcer {
	return E("ash/AddFilter", fire.Except(fire.Create, fire.CollectionAction), func(ctx *fire.Context) error {
		// assign specified filter
		ctx.Filters = append(ctx.Filters, filter)

		return nil
	})
}
func AddFilter(filter bson.M) *Enforcer {
	return E("ash/AddFilter", fire.Except(fire.Create, fire.CollectionAction), func(ctx *fire.Context) error {
		// assign specified filter
		ctx.Filters = append(ctx.Filters, filter)

		return nil
	})
}
// AddFilter will enforce the authorization by adding the passed filter to the
// Filter query of the context. It should be used if the candidate is allowed to
// access the resource in general, but some documents should be filtered out.
//
// Note: This enforcer cannot be used to authorize Create and CollectionAction
// operations.