public final class ExplainedDenyPolicy extends GeneratedMessageV3 implements ExplainedDenyPolicyOrBuilder
Details about how a specific IAM deny policy Policy
contributed to the access check.
Protobuf type google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicy
Inherited Members
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT)
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT,int)
com.google.protobuf.GeneratedMessageV3.<T>emptyList(java.lang.Class<T>)
com.google.protobuf.GeneratedMessageV3.internalGetMapFieldReflection(int)
Static Fields
DENY_ACCESS_STATE_FIELD_NUMBER
public static final int DENY_ACCESS_STATE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
POLICY_FIELD_NUMBER
public static final int POLICY_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
RELEVANCE_FIELD_NUMBER
public static final int RELEVANCE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
RULE_EXPLANATIONS_FIELD_NUMBER
public static final int RULE_EXPLANATIONS_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
Static Methods
getDefaultInstance()
public static ExplainedDenyPolicy getDefaultInstance()
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
newBuilder()
public static ExplainedDenyPolicy.Builder newBuilder()
newBuilder(ExplainedDenyPolicy prototype)
public static ExplainedDenyPolicy.Builder newBuilder(ExplainedDenyPolicy prototype)
public static ExplainedDenyPolicy parseDelimitedFrom(InputStream input)
public static ExplainedDenyPolicy parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(byte[] data)
public static ExplainedDenyPolicy parseFrom(byte[] data)
| Parameter |
| Name |
Description |
data |
byte[]
|
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static ExplainedDenyPolicy parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteString data)
public static ExplainedDenyPolicy parseFrom(ByteString data)
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static ExplainedDenyPolicy parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static ExplainedDenyPolicy parseFrom(CodedInputStream input)
public static ExplainedDenyPolicy parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
public static ExplainedDenyPolicy parseFrom(InputStream input)
public static ExplainedDenyPolicy parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteBuffer data)
public static ExplainedDenyPolicy parseFrom(ByteBuffer data)
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static ExplainedDenyPolicy parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
parser()
public static Parser<ExplainedDenyPolicy> parser()
Methods
equals(Object obj)
public boolean equals(Object obj)
| Parameter |
| Name |
Description |
obj |
Object
|
Overrides
getDefaultInstanceForType()
public ExplainedDenyPolicy getDefaultInstanceForType()
getDenyAccessState()
public DenyAccessState getDenyAccessState()
Required. Indicates whether this policy denies the specified permission
to the specified principal for the specified resource.
This field does not indicate whether the principal actually has the
permission for the resource. There might be another policy that overrides
this policy. To determine whether the principal actually has the
permission, use the overall_access_state field in the
TroubleshootIamPolicyResponse.
.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];
getDenyAccessStateValue()
public int getDenyAccessStateValue()
Required. Indicates whether this policy denies the specified permission
to the specified principal for the specified resource.
This field does not indicate whether the principal actually has the
permission for the resource. There might be another policy that overrides
this policy. To determine whether the principal actually has the
permission, use the overall_access_state field in the
TroubleshootIamPolicyResponse.
.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];
| Returns |
| Type |
Description |
int |
The enum numeric value on the wire for denyAccessState.
|
getParserForType()
public Parser<ExplainedDenyPolicy> getParserForType()
Overrides
getPolicy()
public Policy getPolicy()
The IAM deny policy attached to the resource.
If the sender of the request does not have access to the policy, this field
is omitted.
.google.iam.v2.Policy policy = 2;
| Returns |
| Type |
Description |
com.google.iam.v2.Policy |
The policy.
|
getPolicyOrBuilder()
public PolicyOrBuilder getPolicyOrBuilder()
The IAM deny policy attached to the resource.
If the sender of the request does not have access to the policy, this field
is omitted.
.google.iam.v2.Policy policy = 2;
| Returns |
| Type |
Description |
com.google.iam.v2.PolicyOrBuilder |
|
getRelevance()
public HeuristicRelevance getRelevance()
The relevance of this policy to the overall access state in the
TroubleshootIamPolicyResponse.
If the sender of the request does not have access to the policy, this field
is omitted.
.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 4;
getRelevanceValue()
public int getRelevanceValue()
The relevance of this policy to the overall access state in the
TroubleshootIamPolicyResponse.
If the sender of the request does not have access to the policy, this field
is omitted.
.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 4;
| Returns |
| Type |
Description |
int |
The enum numeric value on the wire for relevance.
|
getRuleExplanations(int index)
public DenyRuleExplanation getRuleExplanations(int index)
Details about how each rule in the policy affects the principal's inability
to use the permission for the resource. The order of the deny rule matches
the order of the rules in the deny policy.
If the sender of the request does not have access to the policy, this field
is omitted.
repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;
| Parameter |
| Name |
Description |
index |
int
|
getRuleExplanationsCount()
public int getRuleExplanationsCount()
Details about how each rule in the policy affects the principal's inability
to use the permission for the resource. The order of the deny rule matches
the order of the rules in the deny policy.
If the sender of the request does not have access to the policy, this field
is omitted.
repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;
| Returns |
| Type |
Description |
int |
|
getRuleExplanationsList()
public List<DenyRuleExplanation> getRuleExplanationsList()
Details about how each rule in the policy affects the principal's inability
to use the permission for the resource. The order of the deny rule matches
the order of the rules in the deny policy.
If the sender of the request does not have access to the policy, this field
is omitted.
repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;
getRuleExplanationsOrBuilder(int index)
public DenyRuleExplanationOrBuilder getRuleExplanationsOrBuilder(int index)
Details about how each rule in the policy affects the principal's inability
to use the permission for the resource. The order of the deny rule matches
the order of the rules in the deny policy.
If the sender of the request does not have access to the policy, this field
is omitted.
repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;
| Parameter |
| Name |
Description |
index |
int
|
getRuleExplanationsOrBuilderList()
public List<? extends DenyRuleExplanationOrBuilder> getRuleExplanationsOrBuilderList()
Details about how each rule in the policy affects the principal's inability
to use the permission for the resource. The order of the deny rule matches
the order of the rules in the deny policy.
If the sender of the request does not have access to the policy, this field
is omitted.
repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;
| Returns |
| Type |
Description |
List<? extends com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanationOrBuilder> |
|
getSerializedSize()
public int getSerializedSize()
| Returns |
| Type |
Description |
int |
|
Overrides
hasPolicy()
public boolean hasPolicy()
The IAM deny policy attached to the resource.
If the sender of the request does not have access to the policy, this field
is omitted.
.google.iam.v2.Policy policy = 2;
| Returns |
| Type |
Description |
boolean |
Whether the policy field is set.
|
hashCode()
| Returns |
| Type |
Description |
int |
|
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Overrides
isInitialized()
public final boolean isInitialized()
Overrides
newBuilderForType()
public ExplainedDenyPolicy.Builder newBuilderForType()
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected ExplainedDenyPolicy.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
| Returns |
| Type |
Description |
Object |
|
Overrides
toBuilder()
public ExplainedDenyPolicy.Builder toBuilder()
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Overrides
