The string has to be a valid query string for the database, use a the place holder '%s' where the id of the method getRights(self,id) shall be inserted.
Enter the column which defines the access rights. The result shall be "intern" or "extern".