All rules follow the PocketBase filter syntax and operators .

(showFiltersInfo = !showFiltersInfo)} > {showFiltersInfo ? "Hide available fields" : "Show available fields"}
{#if showFiltersInfo}

The following record fields are available:

id created updated {#each collection.schema as field} {#if field.type === "relation" || field.type === "user"} {field.name}.* {:else} {field.name} {/if} {/each}

The request fields could be accessed with the special @request filter:

@request.method @request.query.* @request.data.* @request.auth.*

You could also add constraints and query other collections using the @collection filter:

@collection.ANY_COLLECTION_NAME.*

Example rule:
@request.auth.id != "" && created > "2022-01-01 00:00:00"

{/if}
{#if collection?.isAuth}

This API rule gives admin-like permissions to allow fully managing the auth record(s), eg. changing the password without requiring to enter the old one, directly updating the verified state or email, etc.

This rule is executed in addition to the create and update API rules.

{/if}