public final class Condition extends GeneratedMessageV3 implements ConditionOrBuilder
A condition necessary for an AccessLevel to be granted. The Condition is an
AND over its fields. So a Condition is true if: 1) the request IP is from one
of the listed subnetworks AND 2) the originating device complies with the
listed device policy AND 3) all listed access levels are granted AND 4) the
request was sent at a time allowed by the DateTimeRestriction.
Protobuf type google.identity.accesscontextmanager.v1.Condition
Static Fields
DEVICE_POLICY_FIELD_NUMBER
public static final int DEVICE_POLICY_FIELD_NUMBER
Field Value
IP_SUBNETWORKS_FIELD_NUMBER
public static final int IP_SUBNETWORKS_FIELD_NUMBER
Field Value
MEMBERS_FIELD_NUMBER
public static final int MEMBERS_FIELD_NUMBER
Field Value
NEGATE_FIELD_NUMBER
public static final int NEGATE_FIELD_NUMBER
Field Value
REGIONS_FIELD_NUMBER
public static final int REGIONS_FIELD_NUMBER
Field Value
REQUIRED_ACCESS_LEVELS_FIELD_NUMBER
public static final int REQUIRED_ACCESS_LEVELS_FIELD_NUMBER
Field Value
Static Methods
getDefaultInstance()
public static Condition getDefaultInstance()
Returns
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
Returns
newBuilder()
public static Condition.Builder newBuilder()
Returns
newBuilder(Condition prototype)
public static Condition.Builder newBuilder(Condition prototype)
Parameter
Returns
parseDelimitedFrom(InputStream input)
public static Condition parseDelimitedFrom(InputStream input)
Parameter
Returns
Exceptions
parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
public static Condition parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(byte[] data)
public static Condition parseFrom(byte[] data)
Parameter
| Name | Description |
| data | byte[]
|
Returns
Exceptions
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static Condition parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(ByteString data)
public static Condition parseFrom(ByteString data)
Parameter
Returns
Exceptions
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static Condition parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(CodedInputStream input)
public static Condition parseFrom(CodedInputStream input)
Parameter
Returns
Exceptions
parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
public static Condition parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(InputStream input)
public static Condition parseFrom(InputStream input)
Parameter
Returns
Exceptions
parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
public static Condition parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(ByteBuffer data)
public static Condition parseFrom(ByteBuffer data)
Parameter
Returns
Exceptions
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static Condition parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parser()
public static Parser<Condition> parser()
Returns
Methods
equals(Object obj)
public boolean equals(Object obj)
Parameter
Returns
Overrides
getDefaultInstanceForType()
public Condition getDefaultInstanceForType()
Returns
getDevicePolicy()
public DevicePolicy getDevicePolicy()
Device specific restrictions, all restrictions must hold for the
Condition to be true. If not specified, all devices are allowed.
.google.identity.accesscontextmanager.v1.DevicePolicy device_policy = 2;
getDevicePolicyOrBuilder()
public DevicePolicyOrBuilder getDevicePolicyOrBuilder()
Device specific restrictions, all restrictions must hold for the
Condition to be true. If not specified, all devices are allowed.
.google.identity.accesscontextmanager.v1.DevicePolicy device_policy = 2;
getIpSubnetworks(int index)
public String getIpSubnetworks(int index)
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for
a CIDR IP address block, the specified IP address portion must be properly
truncated (i.e. all the host bits must be zero) or the input is considered
malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is
not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
"2001:db8::1/32" is not. The originating IP of a request must be in one of
the listed subnets in order for this Condition to be true. If empty, all IP
addresses are allowed.
repeated string ip_subnetworks = 1;
| Name | Description |
| index | int
The index of the element to return.
|
Returns
| Type | Description |
| String | The ipSubnetworks at the given index.
|
getIpSubnetworksBytes(int index)
public ByteString getIpSubnetworksBytes(int index)
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for
a CIDR IP address block, the specified IP address portion must be properly
truncated (i.e. all the host bits must be zero) or the input is considered
malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is
not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
"2001:db8::1/32" is not. The originating IP of a request must be in one of
the listed subnets in order for this Condition to be true. If empty, all IP
addresses are allowed.
repeated string ip_subnetworks = 1;
| Name | Description |
| index | int
The index of the value to return.
|
Returns
| Type | Description |
| ByteString | The bytes of the ipSubnetworks at the given index.
|
getIpSubnetworksCount()
public int getIpSubnetworksCount()
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for
a CIDR IP address block, the specified IP address portion must be properly
truncated (i.e. all the host bits must be zero) or the input is considered
malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is
not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
"2001:db8::1/32" is not. The originating IP of a request must be in one of
the listed subnets in order for this Condition to be true. If empty, all IP
addresses are allowed.
repeated string ip_subnetworks = 1;
| Type | Description |
| int | The count of ipSubnetworks.
|
getIpSubnetworksList()
public ProtocolStringList getIpSubnetworksList()
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for
a CIDR IP address block, the specified IP address portion must be properly
truncated (i.e. all the host bits must be zero) or the input is considered
malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is
not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
"2001:db8::1/32" is not. The originating IP of a request must be in one of
the listed subnets in order for this Condition to be true. If empty, all IP
addresses are allowed.
repeated string ip_subnetworks = 1;
getMembers(int index)
public String getMembers(int index)
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
user:{emailid}
serviceAccount:{emailid}
If not specified, a request may come from any user.
repeated string members = 6;
| Name | Description |
| index | int
The index of the element to return.
|
Returns
| Type | Description |
| String | The members at the given index.
|
getMembersBytes(int index)
public ByteString getMembersBytes(int index)
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
user:{emailid}
serviceAccount:{emailid}
If not specified, a request may come from any user.
repeated string members = 6;
| Name | Description |
| index | int
The index of the value to return.
|
Returns
| Type | Description |
| ByteString | The bytes of the members at the given index.
|
getMembersCount()
public int getMembersCount()
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
user:{emailid}
serviceAccount:{emailid}
If not specified, a request may come from any user.
repeated string members = 6;
| Type | Description |
| int | The count of members.
|
getMembersList()
public ProtocolStringList getMembersList()
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
user:{emailid}
serviceAccount:{emailid}
If not specified, a request may come from any user.
repeated string members = 6;
getNegate()
public boolean getNegate()
Whether to negate the Condition. If true, the Condition becomes a NAND over
its non-empty fields, each field must be false for the Condition overall to
be satisfied. Defaults to false.
bool negate = 5;
getParserForType()
public Parser<Condition> getParserForType()
Returns
Overrides
getRegions(int index)
public String getRegions(int index)
The request must originate from one of the provided countries/regions.
Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;
| Name | Description |
| index | int
The index of the element to return.
|
Returns
| Type | Description |
| String | The regions at the given index.
|
getRegionsBytes(int index)
public ByteString getRegionsBytes(int index)
The request must originate from one of the provided countries/regions.
Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;
| Name | Description |
| index | int
The index of the value to return.
|
Returns
| Type | Description |
| ByteString | The bytes of the regions at the given index.
|
getRegionsCount()
public int getRegionsCount()
The request must originate from one of the provided countries/regions.
Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;
| Type | Description |
| int | The count of regions.
|
getRegionsList()
public ProtocolStringList getRegionsList()
The request must originate from one of the provided countries/regions.
Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;
getRequiredAccessLevels(int index)
public String getRequiredAccessLevels(int index)
A list of other access levels defined in the same Policy, referenced by
resource name. Referencing an AccessLevel which does not exist is an
error. All access levels listed must be granted for the Condition
to be true. Example:
"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"
repeated string required_access_levels = 3;
| Name | Description |
| index | int
The index of the element to return.
|
Returns
| Type | Description |
| String | The requiredAccessLevels at the given index.
|
getRequiredAccessLevelsBytes(int index)
public ByteString getRequiredAccessLevelsBytes(int index)
A list of other access levels defined in the same Policy, referenced by
resource name. Referencing an AccessLevel which does not exist is an
error. All access levels listed must be granted for the Condition
to be true. Example:
"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"
repeated string required_access_levels = 3;
| Name | Description |
| index | int
The index of the value to return.
|
Returns
| Type | Description |
| ByteString | The bytes of the requiredAccessLevels at the given index.
|
getRequiredAccessLevelsCount()
public int getRequiredAccessLevelsCount()
A list of other access levels defined in the same Policy, referenced by
resource name. Referencing an AccessLevel which does not exist is an
error. All access levels listed must be granted for the Condition
to be true. Example:
"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"
repeated string required_access_levels = 3;
| Type | Description |
| int | The count of requiredAccessLevels.
|
getRequiredAccessLevelsList()
public ProtocolStringList getRequiredAccessLevelsList()
A list of other access levels defined in the same Policy, referenced by
resource name. Referencing an AccessLevel which does not exist is an
error. All access levels listed must be granted for the Condition
to be true. Example:
"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"
repeated string required_access_levels = 3;
getSerializedSize()
public int getSerializedSize()
Returns
Overrides
getUnknownFields()
public final UnknownFieldSet getUnknownFields()
Returns
Overrides
hasDevicePolicy()
public boolean hasDevicePolicy()
Device specific restrictions, all restrictions must hold for the
Condition to be true. If not specified, all devices are allowed.
.google.identity.accesscontextmanager.v1.DevicePolicy device_policy = 2;
| Type | Description |
| boolean | Whether the devicePolicy field is set.
|
hashCode()
Returns
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Returns
Overrides
isInitialized()
public final boolean isInitialized()
Returns
Overrides
newBuilderForType()
public Condition.Builder newBuilderForType()
Returns
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected Condition.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Parameter
Returns
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
Parameter
Returns
Overrides
toBuilder()
public Condition.Builder toBuilder()
Returns
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Parameter
Overrides
Exceptions
