public final class ExplainedDenyResource extends GeneratedMessageV3 implements ExplainedDenyResourceOrBuilder
Details about how a specific resource contributed to the deny policy
evaluation.
Protobuf type google.cloud.policytroubleshooter.iam.v3.ExplainedDenyResource
Inherited Members
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT)
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT,int)
com.google.protobuf.GeneratedMessageV3.<T>emptyList(java.lang.Class<T>)
com.google.protobuf.GeneratedMessageV3.internalGetMapFieldReflection(int)
Static Fields
DENY_ACCESS_STATE_FIELD_NUMBER
public static final int DENY_ACCESS_STATE_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
EXPLAINED_POLICIES_FIELD_NUMBER
public static final int EXPLAINED_POLICIES_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
FULL_RESOURCE_NAME_FIELD_NUMBER
public static final int FULL_RESOURCE_NAME_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
RELEVANCE_FIELD_NUMBER
public static final int RELEVANCE_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
Static Methods
getDefaultInstance()
public static ExplainedDenyResource getDefaultInstance()
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
newBuilder()
public static ExplainedDenyResource.Builder newBuilder()
newBuilder(ExplainedDenyResource prototype)
public static ExplainedDenyResource.Builder newBuilder(ExplainedDenyResource prototype)
public static ExplainedDenyResource parseDelimitedFrom(InputStream input)
public static ExplainedDenyResource parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(byte[] data)
public static ExplainedDenyResource parseFrom(byte[] data)
| Parameter |
|---|
| Name | Description |
data | byte[]
|
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static ExplainedDenyResource parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteString data)
public static ExplainedDenyResource parseFrom(ByteString data)
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static ExplainedDenyResource parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static ExplainedDenyResource parseFrom(CodedInputStream input)
public static ExplainedDenyResource parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
public static ExplainedDenyResource parseFrom(InputStream input)
public static ExplainedDenyResource parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteBuffer data)
public static ExplainedDenyResource parseFrom(ByteBuffer data)
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static ExplainedDenyResource parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
parser()
public static Parser<ExplainedDenyResource> parser()
Methods
equals(Object obj)
public boolean equals(Object obj)
| Parameter |
|---|
| Name | Description |
obj | Object
|
Overrides
getDefaultInstanceForType()
public ExplainedDenyResource getDefaultInstanceForType()
getDenyAccessState()
public DenyAccessState getDenyAccessState()
Required. Indicates whether any policies attached to this resource deny
the specific permission to the specified principal for the specified
resource.
This field does not indicate whether the principal actually has the
permission for the resource. There might be another policy that overrides
this policy. To determine whether the principal actually has the
permission, use the overall_access_state field in the
TroubleshootIamPolicyResponse.
.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];
getDenyAccessStateValue()
public int getDenyAccessStateValue()
Required. Indicates whether any policies attached to this resource deny
the specific permission to the specified principal for the specified
resource.
This field does not indicate whether the principal actually has the
permission for the resource. There might be another policy that overrides
this policy. To determine whether the principal actually has the
permission, use the overall_access_state field in the
TroubleshootIamPolicyResponse.
.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];
| Returns |
|---|
| Type | Description |
int | The enum numeric value on the wire for denyAccessState.
|
getExplainedPolicies(int index)
public ExplainedDenyPolicy getExplainedPolicies(int index)
List of IAM deny policies that were evaluated to check the principal's
denied permissions, with annotations to indicate how each policy
contributed to the final result.
repeated .google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicy explained_policies = 3;
| Parameter |
|---|
| Name | Description |
index | int
|
getExplainedPoliciesCount()
public int getExplainedPoliciesCount()
List of IAM deny policies that were evaluated to check the principal's
denied permissions, with annotations to indicate how each policy
contributed to the final result.
repeated .google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicy explained_policies = 3;
| Returns |
|---|
| Type | Description |
int | |
getExplainedPoliciesList()
public List<ExplainedDenyPolicy> getExplainedPoliciesList()
List of IAM deny policies that were evaluated to check the principal's
denied permissions, with annotations to indicate how each policy
contributed to the final result.
repeated .google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicy explained_policies = 3;
getExplainedPoliciesOrBuilder(int index)
public ExplainedDenyPolicyOrBuilder getExplainedPoliciesOrBuilder(int index)
List of IAM deny policies that were evaluated to check the principal's
denied permissions, with annotations to indicate how each policy
contributed to the final result.
repeated .google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicy explained_policies = 3;
| Parameter |
|---|
| Name | Description |
index | int
|
getExplainedPoliciesOrBuilderList()
public List<? extends ExplainedDenyPolicyOrBuilder> getExplainedPoliciesOrBuilderList()
List of IAM deny policies that were evaluated to check the principal's
denied permissions, with annotations to indicate how each policy
contributed to the final result.
repeated .google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicy explained_policies = 3;
| Returns |
|---|
| Type | Description |
List<? extends com.google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicyOrBuilder> | |
getFullResourceName()
public String getFullResourceName()
The full resource name that identifies the resource. For example,
//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.
If the sender of the request does not have access to the policy, this field
is omitted.
For examples of full resource names for Google Cloud services, see
https://cloud.google.com/iam/help/troubleshooter/full-resource-names.
string full_resource_name = 2;
| Returns |
|---|
| Type | Description |
String | The fullResourceName.
|
getFullResourceNameBytes()
public ByteString getFullResourceNameBytes()
The full resource name that identifies the resource. For example,
//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.
If the sender of the request does not have access to the policy, this field
is omitted.
For examples of full resource names for Google Cloud services, see
https://cloud.google.com/iam/help/troubleshooter/full-resource-names.
string full_resource_name = 2;
| Returns |
|---|
| Type | Description |
ByteString | The bytes for fullResourceName.
|
getParserForType()
public Parser<ExplainedDenyResource> getParserForType()
Overrides
getRelevance()
public HeuristicRelevance getRelevance()
The relevance of this policy to the overall access state in the
TroubleshootIamPolicyResponse.
If the sender of the request does not have access to the policy, this field
is omitted.
.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 4;
getRelevanceValue()
public int getRelevanceValue()
The relevance of this policy to the overall access state in the
TroubleshootIamPolicyResponse.
If the sender of the request does not have access to the policy, this field
is omitted.
.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 4;
| Returns |
|---|
| Type | Description |
int | The enum numeric value on the wire for relevance.
|
getSerializedSize()
public int getSerializedSize()
| Returns |
|---|
| Type | Description |
int | |
Overrides
hashCode()
| Returns |
|---|
| Type | Description |
int | |
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Overrides
isInitialized()
public final boolean isInitialized()
Overrides
newBuilderForType()
public ExplainedDenyResource.Builder newBuilderForType()
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected ExplainedDenyResource.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
Overrides
toBuilder()
public ExplainedDenyResource.Builder toBuilder()
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Overrides
