public final class Condition extends GeneratedMessageV3 implements ConditionOrBuilder
A condition necessary for an AccessLevel to be granted. The Condition is an
AND over its fields. So a Condition is true if: 1) the request IP is from one
of the listed subnetworks AND 2) the originating device complies with the
listed device policy AND 3) all listed access levels are granted AND 4) the
request was sent at a time allowed by the DateTimeRestriction.
Protobuf type google.identity.accesscontextmanager.v1.Condition
Inherited Members
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT)
Static Fields
DEVICE_POLICY_FIELD_NUMBER
public static final int DEVICE_POLICY_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
IP_SUBNETWORKS_FIELD_NUMBER
public static final int IP_SUBNETWORKS_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
MEMBERS_FIELD_NUMBER
public static final int MEMBERS_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
NEGATE_FIELD_NUMBER
public static final int NEGATE_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
REGIONS_FIELD_NUMBER
public static final int REGIONS_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
REQUIRED_ACCESS_LEVELS_FIELD_NUMBER
public static final int REQUIRED_ACCESS_LEVELS_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
Static Methods
getDefaultInstance()
public static Condition getDefaultInstance()
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
newBuilder()
public static Condition.Builder newBuilder()
newBuilder(Condition prototype)
public static Condition.Builder newBuilder(Condition prototype)
parseDelimitedFrom(InputStream input)
public static Condition parseDelimitedFrom(InputStream input)
parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
public static Condition parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(byte[] data)
public static Condition parseFrom(byte[] data)
| Parameter |
|---|
| Name | Description |
data | byte[]
|
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static Condition parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteString data)
public static Condition parseFrom(ByteString data)
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static Condition parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
parseFrom(CodedInputStream input)
public static Condition parseFrom(CodedInputStream input)
parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
public static Condition parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(InputStream input)
public static Condition parseFrom(InputStream input)
parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
public static Condition parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteBuffer data)
public static Condition parseFrom(ByteBuffer data)
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static Condition parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
parser()
public static Parser<Condition> parser()
Methods
equals(Object obj)
public boolean equals(Object obj)
| Parameter |
|---|
| Name | Description |
obj | Object
|
Overrides
getDefaultInstanceForType()
public Condition getDefaultInstanceForType()
getDevicePolicy()
public DevicePolicy getDevicePolicy()
Device specific restrictions, all restrictions must hold for the
Condition to be true. If not specified, all devices are allowed.
.google.identity.accesscontextmanager.v1.DevicePolicy device_policy = 2;
getDevicePolicyOrBuilder()
public DevicePolicyOrBuilder getDevicePolicyOrBuilder()
Device specific restrictions, all restrictions must hold for the
Condition to be true. If not specified, all devices are allowed.
.google.identity.accesscontextmanager.v1.DevicePolicy device_policy = 2;
getIpSubnetworks(int index)
public String getIpSubnetworks(int index)
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for
a CIDR IP address block, the specified IP address portion must be properly
truncated (i.e. all the host bits must be zero) or the input is considered
malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is
not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
"2001:db8::1/32" is not. The originating IP of a request must be in one of
the listed subnets in order for this Condition to be true. If empty, all IP
addresses are allowed.
repeated string ip_subnetworks = 1;
| Parameter |
|---|
| Name | Description |
index | int
The index of the element to return.
|
| Returns |
|---|
| Type | Description |
String | The ipSubnetworks at the given index.
|
getIpSubnetworksBytes(int index)
public ByteString getIpSubnetworksBytes(int index)
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for
a CIDR IP address block, the specified IP address portion must be properly
truncated (i.e. all the host bits must be zero) or the input is considered
malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is
not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
"2001:db8::1/32" is not. The originating IP of a request must be in one of
the listed subnets in order for this Condition to be true. If empty, all IP
addresses are allowed.
repeated string ip_subnetworks = 1;
| Parameter |
|---|
| Name | Description |
index | int
The index of the value to return.
|
| Returns |
|---|
| Type | Description |
ByteString | The bytes of the ipSubnetworks at the given index.
|
getIpSubnetworksCount()
public int getIpSubnetworksCount()
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for
a CIDR IP address block, the specified IP address portion must be properly
truncated (i.e. all the host bits must be zero) or the input is considered
malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is
not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
"2001:db8::1/32" is not. The originating IP of a request must be in one of
the listed subnets in order for this Condition to be true. If empty, all IP
addresses are allowed.
repeated string ip_subnetworks = 1;
| Returns |
|---|
| Type | Description |
int | The count of ipSubnetworks.
|
getIpSubnetworksList()
public ProtocolStringList getIpSubnetworksList()
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for
a CIDR IP address block, the specified IP address portion must be properly
truncated (i.e. all the host bits must be zero) or the input is considered
malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is
not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
"2001:db8::1/32" is not. The originating IP of a request must be in one of
the listed subnets in order for this Condition to be true. If empty, all IP
addresses are allowed.
repeated string ip_subnetworks = 1;
getMembers(int index)
public String getMembers(int index)
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
user:{emailid}
serviceAccount:{emailid}
If not specified, a request may come from any user.
repeated string members = 6;
| Parameter |
|---|
| Name | Description |
index | int
The index of the element to return.
|
| Returns |
|---|
| Type | Description |
String | The members at the given index.
|
getMembersBytes(int index)
public ByteString getMembersBytes(int index)
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
user:{emailid}
serviceAccount:{emailid}
If not specified, a request may come from any user.
repeated string members = 6;
| Parameter |
|---|
| Name | Description |
index | int
The index of the value to return.
|
| Returns |
|---|
| Type | Description |
ByteString | The bytes of the members at the given index.
|
getMembersCount()
public int getMembersCount()
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
user:{emailid}
serviceAccount:{emailid}
If not specified, a request may come from any user.
repeated string members = 6;
| Returns |
|---|
| Type | Description |
int | The count of members.
|
getMembersList()
public ProtocolStringList getMembersList()
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
user:{emailid}
serviceAccount:{emailid}
If not specified, a request may come from any user.
repeated string members = 6;
getNegate()
public boolean getNegate()
Whether to negate the Condition. If true, the Condition becomes a NAND over
its non-empty fields, each field must be false for the Condition overall to
be satisfied. Defaults to false.
bool negate = 5;
| Returns |
|---|
| Type | Description |
boolean | The negate.
|
getParserForType()
public Parser<Condition> getParserForType()
Overrides
getRegions(int index)
public String getRegions(int index)
The request must originate from one of the provided countries/regions.
Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;
| Parameter |
|---|
| Name | Description |
index | int
The index of the element to return.
|
| Returns |
|---|
| Type | Description |
String | The regions at the given index.
|
getRegionsBytes(int index)
public ByteString getRegionsBytes(int index)
The request must originate from one of the provided countries/regions.
Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;
| Parameter |
|---|
| Name | Description |
index | int
The index of the value to return.
|
| Returns |
|---|
| Type | Description |
ByteString | The bytes of the regions at the given index.
|
getRegionsCount()
public int getRegionsCount()
The request must originate from one of the provided countries/regions.
Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;
| Returns |
|---|
| Type | Description |
int | The count of regions.
|
getRegionsList()
public ProtocolStringList getRegionsList()
The request must originate from one of the provided countries/regions.
Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;
getRequiredAccessLevels(int index)
public String getRequiredAccessLevels(int index)
A list of other access levels defined in the same Policy, referenced by
resource name. Referencing an AccessLevel which does not exist is an
error. All access levels listed must be granted for the Condition
to be true. Example:
"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"
repeated string required_access_levels = 3;
| Parameter |
|---|
| Name | Description |
index | int
The index of the element to return.
|
| Returns |
|---|
| Type | Description |
String | The requiredAccessLevels at the given index.
|
getRequiredAccessLevelsBytes(int index)
public ByteString getRequiredAccessLevelsBytes(int index)
A list of other access levels defined in the same Policy, referenced by
resource name. Referencing an AccessLevel which does not exist is an
error. All access levels listed must be granted for the Condition
to be true. Example:
"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"
repeated string required_access_levels = 3;
| Parameter |
|---|
| Name | Description |
index | int
The index of the value to return.
|
| Returns |
|---|
| Type | Description |
ByteString | The bytes of the requiredAccessLevels at the given index.
|
getRequiredAccessLevelsCount()
public int getRequiredAccessLevelsCount()
A list of other access levels defined in the same Policy, referenced by
resource name. Referencing an AccessLevel which does not exist is an
error. All access levels listed must be granted for the Condition
to be true. Example:
"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"
repeated string required_access_levels = 3;
| Returns |
|---|
| Type | Description |
int | The count of requiredAccessLevels.
|
getRequiredAccessLevelsList()
public ProtocolStringList getRequiredAccessLevelsList()
A list of other access levels defined in the same Policy, referenced by
resource name. Referencing an AccessLevel which does not exist is an
error. All access levels listed must be granted for the Condition
to be true. Example:
"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"
repeated string required_access_levels = 3;
getSerializedSize()
public int getSerializedSize()
| Returns |
|---|
| Type | Description |
int | |
Overrides
hasDevicePolicy()
public boolean hasDevicePolicy()
Device specific restrictions, all restrictions must hold for the
Condition to be true. If not specified, all devices are allowed.
.google.identity.accesscontextmanager.v1.DevicePolicy device_policy = 2;
| Returns |
|---|
| Type | Description |
boolean | Whether the devicePolicy field is set.
|
hashCode()
| Returns |
|---|
| Type | Description |
int | |
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Overrides
isInitialized()
public final boolean isInitialized()
Overrides
newBuilderForType()
public Condition.Builder newBuilderForType()
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected Condition.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
Overrides
toBuilder()
public Condition.Builder toBuilder()
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Overrides
