public static final class IamPolicyAnalysisResult.AccessControlList extends GeneratedMessageV3 implements IamPolicyAnalysisResult.AccessControlListOrBuilder
An access control list, derived from the above IAM policy binding, which
contains a set of resources and accesses. May include one
item from each set to compose an access control entry.
NOTICE that there could be multiple access control lists for one IAM policy
binding. The access control lists are created based on resource and access
combinations.
For example, assume we have the following cases in one IAM policy binding:
- Permission P1 and P2 apply to resource R1 and R2;
- Permission P3 applies to resource R2 and R3;
This will result in the following access control lists:
- AccessControlList 1: [R1, R2], [P1, P2]
- AccessControlList 2: [R2, R3], [P3]
Protobuf type google.cloud.asset.v1.IamPolicyAnalysisResult.AccessControlList
Static Fields
ACCESSES_FIELD_NUMBER
public static final int ACCESSES_FIELD_NUMBER
Field Value
CONDITION_EVALUATION_FIELD_NUMBER
public static final int CONDITION_EVALUATION_FIELD_NUMBER
Field Value
RESOURCES_FIELD_NUMBER
public static final int RESOURCES_FIELD_NUMBER
Field Value
RESOURCE_EDGES_FIELD_NUMBER
public static final int RESOURCE_EDGES_FIELD_NUMBER
Field Value
Static Methods
getDefaultInstance()
public static IamPolicyAnalysisResult.AccessControlList getDefaultInstance()
Returns
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
Returns
newBuilder()
public static IamPolicyAnalysisResult.AccessControlList.Builder newBuilder()
Returns
newBuilder(IamPolicyAnalysisResult.AccessControlList prototype)
public static IamPolicyAnalysisResult.AccessControlList.Builder newBuilder(IamPolicyAnalysisResult.AccessControlList prototype)
Parameter
Returns
public static IamPolicyAnalysisResult.AccessControlList parseDelimitedFrom(InputStream input)
Parameter
Returns
Exceptions
public static IamPolicyAnalysisResult.AccessControlList parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(byte[] data)
public static IamPolicyAnalysisResult.AccessControlList parseFrom(byte[] data)
Parameter
Name | Description |
data | byte[]
|
Returns
Exceptions
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static IamPolicyAnalysisResult.AccessControlList parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(ByteString data)
public static IamPolicyAnalysisResult.AccessControlList parseFrom(ByteString data)
Parameter
Returns
Exceptions
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static IamPolicyAnalysisResult.AccessControlList parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
public static IamPolicyAnalysisResult.AccessControlList parseFrom(CodedInputStream input)
Parameter
Returns
Exceptions
public static IamPolicyAnalysisResult.AccessControlList parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
public static IamPolicyAnalysisResult.AccessControlList parseFrom(InputStream input)
Parameter
Returns
Exceptions
public static IamPolicyAnalysisResult.AccessControlList parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(ByteBuffer data)
public static IamPolicyAnalysisResult.AccessControlList parseFrom(ByteBuffer data)
Parameter
Returns
Exceptions
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static IamPolicyAnalysisResult.AccessControlList parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parser()
public static Parser<IamPolicyAnalysisResult.AccessControlList> parser()
Returns
Methods
equals(Object obj)
public boolean equals(Object obj)
Parameter
Returns
Overrides
getAccesses(int index)
public IamPolicyAnalysisResult.Access getAccesses(int index)
The accesses that match one of the following conditions:
- The access_selector, if it is specified in request;
- Otherwise, access specifiers reachable from the policy binding's role.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Access accesses = 2;
Parameter
Returns
getAccessesCount()
public int getAccessesCount()
The accesses that match one of the following conditions:
- The access_selector, if it is specified in request;
- Otherwise, access specifiers reachable from the policy binding's role.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Access accesses = 2;
Returns
getAccessesList()
public List<IamPolicyAnalysisResult.Access> getAccessesList()
The accesses that match one of the following conditions:
- The access_selector, if it is specified in request;
- Otherwise, access specifiers reachable from the policy binding's role.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Access accesses = 2;
Returns
getAccessesOrBuilder(int index)
public IamPolicyAnalysisResult.AccessOrBuilder getAccessesOrBuilder(int index)
The accesses that match one of the following conditions:
- The access_selector, if it is specified in request;
- Otherwise, access specifiers reachable from the policy binding's role.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Access accesses = 2;
Parameter
Returns
getAccessesOrBuilderList()
public List<? extends IamPolicyAnalysisResult.AccessOrBuilder> getAccessesOrBuilderList()
The accesses that match one of the following conditions:
- The access_selector, if it is specified in request;
- Otherwise, access specifiers reachable from the policy binding's role.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Access accesses = 2;
Returns
Type | Description |
List<? extends com.google.cloud.asset.v1.IamPolicyAnalysisResult.AccessOrBuilder> | |
getConditionEvaluation()
public ConditionEvaluation getConditionEvaluation()
Condition evaluation for this AccessControlList, if there is a condition
defined in the above IAM policy binding.
.google.cloud.asset.v1.ConditionEvaluation condition_evaluation = 4;
Returns
getConditionEvaluationOrBuilder()
public ConditionEvaluationOrBuilder getConditionEvaluationOrBuilder()
Condition evaluation for this AccessControlList, if there is a condition
defined in the above IAM policy binding.
.google.cloud.asset.v1.ConditionEvaluation condition_evaluation = 4;
Returns
getDefaultInstanceForType()
public IamPolicyAnalysisResult.AccessControlList getDefaultInstanceForType()
Returns
getParserForType()
public Parser<IamPolicyAnalysisResult.AccessControlList> getParserForType()
Returns
Overrides
getResourceEdges(int index)
public IamPolicyAnalysisResult.Edge getResourceEdges(int index)
Resource edges of the graph starting from the policy attached
resource to any descendant resources. The
Edge.source_node
contains the full resource name of a parent resource and
Edge.target_node
contains the full resource name of a child resource. This field is
present only if the output_resource_edges option is enabled in request.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Edge resource_edges = 3;
Parameter
Returns
getResourceEdgesCount()
public int getResourceEdgesCount()
Resource edges of the graph starting from the policy attached
resource to any descendant resources. The
Edge.source_node
contains the full resource name of a parent resource and
Edge.target_node
contains the full resource name of a child resource. This field is
present only if the output_resource_edges option is enabled in request.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Edge resource_edges = 3;
Returns
getResourceEdgesList()
public List<IamPolicyAnalysisResult.Edge> getResourceEdgesList()
Resource edges of the graph starting from the policy attached
resource to any descendant resources. The
Edge.source_node
contains the full resource name of a parent resource and
Edge.target_node
contains the full resource name of a child resource. This field is
present only if the output_resource_edges option is enabled in request.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Edge resource_edges = 3;
Returns
getResourceEdgesOrBuilder(int index)
public IamPolicyAnalysisResult.EdgeOrBuilder getResourceEdgesOrBuilder(int index)
Resource edges of the graph starting from the policy attached
resource to any descendant resources. The
Edge.source_node
contains the full resource name of a parent resource and
Edge.target_node
contains the full resource name of a child resource. This field is
present only if the output_resource_edges option is enabled in request.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Edge resource_edges = 3;
Parameter
Returns
getResourceEdgesOrBuilderList()
public List<? extends IamPolicyAnalysisResult.EdgeOrBuilder> getResourceEdgesOrBuilderList()
Resource edges of the graph starting from the policy attached
resource to any descendant resources. The
Edge.source_node
contains the full resource name of a parent resource and
Edge.target_node
contains the full resource name of a child resource. This field is
present only if the output_resource_edges option is enabled in request.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Edge resource_edges = 3;
Returns
Type | Description |
List<? extends com.google.cloud.asset.v1.IamPolicyAnalysisResult.EdgeOrBuilder> | |
getResources(int index)
public IamPolicyAnalysisResult.Resource getResources(int index)
The resources that match one of the following conditions:
- The resource_selector, if it is specified in request;
- Otherwise, resources reachable from the policy attached resource.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Resource resources = 1;
Parameter
Returns
getResourcesCount()
public int getResourcesCount()
The resources that match one of the following conditions:
- The resource_selector, if it is specified in request;
- Otherwise, resources reachable from the policy attached resource.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Resource resources = 1;
Returns
getResourcesList()
public List<IamPolicyAnalysisResult.Resource> getResourcesList()
The resources that match one of the following conditions:
- The resource_selector, if it is specified in request;
- Otherwise, resources reachable from the policy attached resource.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Resource resources = 1;
Returns
getResourcesOrBuilder(int index)
public IamPolicyAnalysisResult.ResourceOrBuilder getResourcesOrBuilder(int index)
The resources that match one of the following conditions:
- The resource_selector, if it is specified in request;
- Otherwise, resources reachable from the policy attached resource.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Resource resources = 1;
Parameter
Returns
getResourcesOrBuilderList()
public List<? extends IamPolicyAnalysisResult.ResourceOrBuilder> getResourcesOrBuilderList()
The resources that match one of the following conditions:
- The resource_selector, if it is specified in request;
- Otherwise, resources reachable from the policy attached resource.
repeated .google.cloud.asset.v1.IamPolicyAnalysisResult.Resource resources = 1;
Returns
Type | Description |
List<? extends com.google.cloud.asset.v1.IamPolicyAnalysisResult.ResourceOrBuilder> | |
getSerializedSize()
public int getSerializedSize()
Returns
Overrides
getUnknownFields()
public final UnknownFieldSet getUnknownFields()
Returns
Overrides
hasConditionEvaluation()
public boolean hasConditionEvaluation()
Condition evaluation for this AccessControlList, if there is a condition
defined in the above IAM policy binding.
.google.cloud.asset.v1.ConditionEvaluation condition_evaluation = 4;
Returns
Type | Description |
boolean | Whether the conditionEvaluation field is set.
|
hashCode()
Returns
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Returns
Overrides
isInitialized()
public final boolean isInitialized()
Returns
Overrides
newBuilderForType()
public IamPolicyAnalysisResult.AccessControlList.Builder newBuilderForType()
Returns
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected IamPolicyAnalysisResult.AccessControlList.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Parameter
Returns
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
Parameter
Returns
Overrides
toBuilder()
public IamPolicyAnalysisResult.AccessControlList.Builder toBuilder()
Returns
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Parameter
Overrides
Exceptions