google.cloud.policytroubleshooter.v1

Interface Explanations.BindingExplanationOrBuilder

All Superinterfaces:

com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder

All Known Implementing Classes:

Explanations.BindingExplanation, Explanations.BindingExplanation.Builder

Enclosing class:

Explanations

public static interface Explanations.BindingExplanationOrBuilder
extends com.google.protobuf.MessageOrBuilder

Method Summary

Modifier and Type	Method and Description
boolean	containsMemberships(String key) Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly.
Explanations.AccessState	getAccess() Required.
int	getAccessValue() Required.
com.google.type.Expr	getCondition() A condition expression that prevents access unless the expression evaluates to `true`.
com.google.type.ExprOrBuilder	getConditionOrBuilder() A condition expression that prevents access unless the expression evaluates to `true`.
Map<String,Explanations.BindingExplanation.AnnotatedMembership>	getMemberships() Deprecated.
int	getMembershipsCount() Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly.
Map<String,Explanations.BindingExplanation.AnnotatedMembership>	getMembershipsMap() Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly.
Explanations.BindingExplanation.AnnotatedMembership	getMembershipsOrDefault(String key, Explanations.BindingExplanation.AnnotatedMembership defaultValue) Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly.
Explanations.BindingExplanation.AnnotatedMembership	getMembershipsOrThrow(String key) Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly.
Explanations.HeuristicRelevance	getRelevance() The relevance of this binding to the overall determination for the entire policy.
int	getRelevanceValue() The relevance of this binding to the overall determination for the entire policy.
String	getRole() The role that this binding grants.
com.google.protobuf.ByteString	getRoleBytes() The role that this binding grants.
Explanations.BindingExplanation.RolePermission	getRolePermission() Indicates whether the role granted by this binding contains the specified permission.
Explanations.HeuristicRelevance	getRolePermissionRelevance() The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.
int	getRolePermissionRelevanceValue() The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.
int	getRolePermissionValue() Indicates whether the role granted by this binding contains the specified permission.
boolean	hasCondition() A condition expression that prevents access unless the expression evaluates to `true`.

Methods inherited from interface com.google.protobuf.MessageOrBuilder

findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

Methods inherited from interface com.google.protobuf.MessageLiteOrBuilder

isInitialized

Method Detail

getAccessValue

int getAccessValue()

 Required. Indicates whether _this binding_ provides the specified permission to the
 specified member for the specified resource.
 This field does _not_ indicate whether the member actually has the
 permission for the resource. There might be another binding that overrides
 this binding. To determine whether the member actually has the permission,
 use the `access` field in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].
 

.google.cloud.policytroubleshooter.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Returns:

The enum numeric value on the wire for access.

getAccess

Explanations.AccessState getAccess()

 Required. Indicates whether _this binding_ provides the specified permission to the
 specified member for the specified resource.
 This field does _not_ indicate whether the member actually has the
 permission for the resource. There might be another binding that overrides
 this binding. To determine whether the member actually has the permission,
 use the `access` field in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].
 

.google.cloud.policytroubleshooter.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Returns:

The access.

getRole

String getRole()

 The role that this binding grants. For example,
 `roles/compute.serviceAgent`.
 For a complete list of predefined IAM roles, as well as the permissions in
 each role, see https://cloud.google.com/iam/help/roles/reference.
 

string role = 2;

Returns:

The role.

getRoleBytes

com.google.protobuf.ByteString getRoleBytes()

 The role that this binding grants. For example,
 `roles/compute.serviceAgent`.
 For a complete list of predefined IAM roles, as well as the permissions in
 each role, see https://cloud.google.com/iam/help/roles/reference.
 

string role = 2;

Returns:

The bytes for role.

getRolePermissionValue

int getRolePermissionValue()

 Indicates whether the role granted by this binding contains the specified
 permission.
 

.google.cloud.policytroubleshooter.v1.BindingExplanation.RolePermission role_permission = 3;

Returns:

The enum numeric value on the wire for rolePermission.

getRolePermission

Explanations.BindingExplanation.RolePermission getRolePermission()

 Indicates whether the role granted by this binding contains the specified
 permission.
 

.google.cloud.policytroubleshooter.v1.BindingExplanation.RolePermission role_permission = 3;

Returns:

The rolePermission.

getRolePermissionRelevanceValue

int getRolePermissionRelevanceValue()

 The relevance of the permission's existence, or nonexistence, in the role
 to the overall determination for the entire policy.
 

.google.cloud.policytroubleshooter.v1.HeuristicRelevance role_permission_relevance = 4;

Returns:

The enum numeric value on the wire for rolePermissionRelevance.

getRolePermissionRelevance

Explanations.HeuristicRelevance getRolePermissionRelevance()

 The relevance of the permission's existence, or nonexistence, in the role
 to the overall determination for the entire policy.
 

.google.cloud.policytroubleshooter.v1.HeuristicRelevance role_permission_relevance = 4;

Returns:

The rolePermissionRelevance.

getMembershipsCount

int getMembershipsCount()

 Indicates whether each member in the binding includes the member specified
 in the request, either directly or indirectly. Each key identifies a member
 in the binding, and each value indicates whether the member in the binding
 includes the member in the request.
 For example, suppose that a binding includes the following members:
 * `user:alice@example.com`
 * `group:product-eng@example.com`
 You want to troubleshoot access for `user:bob@example.com`. This user is a
 member of the group `group:product-eng@example.com`.
 For the first member in the binding, the key is `user:alice@example.com`,
 and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.
 For the second member in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

containsMemberships

boolean containsMemberships(String key)

 Indicates whether each member in the binding includes the member specified
 in the request, either directly or indirectly. Each key identifies a member
 in the binding, and each value indicates whether the member in the binding
 includes the member in the request.
 For example, suppose that a binding includes the following members:
 * `user:alice@example.com`
 * `group:product-eng@example.com`
 You want to troubleshoot access for `user:bob@example.com`. This user is a
 member of the group `group:product-eng@example.com`.
 For the first member in the binding, the key is `user:alice@example.com`,
 and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.
 For the second member in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

getMemberships

@Deprecated
Map<String,Explanations.BindingExplanation.AnnotatedMembership> getMemberships()

Deprecated.

Use getMembershipsMap() instead.

getMembershipsMap

Map<String,Explanations.BindingExplanation.AnnotatedMembership> getMembershipsMap()

 Indicates whether each member in the binding includes the member specified
 in the request, either directly or indirectly. Each key identifies a member
 in the binding, and each value indicates whether the member in the binding
 includes the member in the request.
 For example, suppose that a binding includes the following members:
 * `user:alice@example.com`
 * `group:product-eng@example.com`
 You want to troubleshoot access for `user:bob@example.com`. This user is a
 member of the group `group:product-eng@example.com`.
 For the first member in the binding, the key is `user:alice@example.com`,
 and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.
 For the second member in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

getMembershipsOrDefault

Explanations.BindingExplanation.AnnotatedMembership getMembershipsOrDefault(String key,
                                                                            Explanations.BindingExplanation.AnnotatedMembership defaultValue)

 Indicates whether each member in the binding includes the member specified
 in the request, either directly or indirectly. Each key identifies a member
 in the binding, and each value indicates whether the member in the binding
 includes the member in the request.
 For example, suppose that a binding includes the following members:
 * `user:alice@example.com`
 * `group:product-eng@example.com`
 You want to troubleshoot access for `user:bob@example.com`. This user is a
 member of the group `group:product-eng@example.com`.
 For the first member in the binding, the key is `user:alice@example.com`,
 and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.
 For the second member in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

getMembershipsOrThrow

Explanations.BindingExplanation.AnnotatedMembership getMembershipsOrThrow(String key)

 Indicates whether each member in the binding includes the member specified
 in the request, either directly or indirectly. Each key identifies a member
 in the binding, and each value indicates whether the member in the binding
 includes the member in the request.
 For example, suppose that a binding includes the following members:
 * `user:alice@example.com`
 * `group:product-eng@example.com`
 You want to troubleshoot access for `user:bob@example.com`. This user is a
 member of the group `group:product-eng@example.com`.
 For the first member in the binding, the key is `user:alice@example.com`,
 and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.
 For the second member in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

getRelevanceValue

int getRelevanceValue()

 The relevance of this binding to the overall determination for the entire
 policy.
 

.google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 6;

Returns:

The enum numeric value on the wire for relevance.

getRelevance

Explanations.HeuristicRelevance getRelevance()

 The relevance of this binding to the overall determination for the entire
 policy.
 

.google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 6;

Returns:

The relevance.

hasCondition

boolean hasCondition()

 A condition expression that prevents access unless the expression evaluates
 to `true`.
 To learn about IAM Conditions, see
 http://cloud.google.com/iam/help/conditions/overview.
 

.google.type.Expr condition = 7;

Returns:

Whether the condition field is set.

getCondition

com.google.type.Expr getCondition()

 A condition expression that prevents access unless the expression evaluates
 to `true`.
 To learn about IAM Conditions, see
 http://cloud.google.com/iam/help/conditions/overview.
 

.google.type.Expr condition = 7;

Returns:

The condition.

getConditionOrBuilder

com.google.type.ExprOrBuilder getConditionOrBuilder()

 A condition expression that prevents access unless the expression evaluates
 to `true`.
 To learn about IAM Conditions, see
 http://cloud.google.com/iam/help/conditions/overview.
 

.google.type.Expr condition = 7;