Class: Google::Cloud::PolicyTroubleshooter::Iam::V3::TroubleshootIamPolicyResponse

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb

Overview

Response for TroubleshootIamPolicy.

Defined Under Namespace

Modules: OverallAccessState

Instance Attribute Summary collapse

Instance Attribute Details

#access_tuple ⇒ ::Google::Cloud::PolicyTroubleshooter::Iam::V3::AccessTuple

Returns The access tuple from the request, including any provided context used to evaluate the condition.

Returns:



55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
 
# File 'proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb', line 55

class TroubleshootIamPolicyResponse
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Whether the principal has the permission on the resource.
  module OverallAccessState
    # Not specified.
    OVERALL_ACCESS_STATE_UNSPECIFIED = 0

    # The principal has the permission.
    CAN_ACCESS = 1

    # The principal doesn't have the permission.
    CANNOT_ACCESS = 2

    # The principal might have the permission, but the sender can't access all
    # of the information needed to fully evaluate the principal's access.
    UNKNOWN_INFO = 3

    # The principal might have the permission, but Policy Troubleshooter can't
    # fully evaluate the principal's access because the sender didn't provide
    # the required context to evaluate the condition.
    UNKNOWN_CONDITIONAL = 4
  end
end

#allow_policy_explanation ⇒ ::Google::Cloud::PolicyTroubleshooter::Iam::V3::AllowPolicyExplanation

Returns An explanation of how the applicable IAM allow policies affect the final access state.

Returns:



55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
 
# File 'proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb', line 55

class TroubleshootIamPolicyResponse
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Whether the principal has the permission on the resource.
  module OverallAccessState
    # Not specified.
    OVERALL_ACCESS_STATE_UNSPECIFIED = 0

    # The principal has the permission.
    CAN_ACCESS = 1

    # The principal doesn't have the permission.
    CANNOT_ACCESS = 2

    # The principal might have the permission, but the sender can't access all
    # of the information needed to fully evaluate the principal's access.
    UNKNOWN_INFO = 3

    # The principal might have the permission, but Policy Troubleshooter can't
    # fully evaluate the principal's access because the sender didn't provide
    # the required context to evaluate the condition.
    UNKNOWN_CONDITIONAL = 4
  end
end

#deny_policy_explanation ⇒ ::Google::Cloud::PolicyTroubleshooter::Iam::V3::DenyPolicyExplanation

Returns An explanation of how the applicable IAM deny policies affect the final access state.

Returns:



55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
 
# File 'proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb', line 55

class TroubleshootIamPolicyResponse
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Whether the principal has the permission on the resource.
  module OverallAccessState
    # Not specified.
    OVERALL_ACCESS_STATE_UNSPECIFIED = 0

    # The principal has the permission.
    CAN_ACCESS = 1

    # The principal doesn't have the permission.
    CANNOT_ACCESS = 2

    # The principal might have the permission, but the sender can't access all
    # of the information needed to fully evaluate the principal's access.
    UNKNOWN_INFO = 3

    # The principal might have the permission, but Policy Troubleshooter can't
    # fully evaluate the principal's access because the sender didn't provide
    # the required context to evaluate the condition.
    UNKNOWN_CONDITIONAL = 4
  end
end

#overall_access_state ⇒ ::Google::Cloud::PolicyTroubleshooter::Iam::V3::TroubleshootIamPolicyResponse::OverallAccessState

Returns Indicates whether the principal has the specified permission for the specified resource, based on evaluating all types of the applicable IAM policies.

Returns:



55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
 
# File 'proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb', line 55

class TroubleshootIamPolicyResponse
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Whether the principal has the permission on the resource.
  module OverallAccessState
    # Not specified.
    OVERALL_ACCESS_STATE_UNSPECIFIED = 0

    # The principal has the permission.
    CAN_ACCESS = 1

    # The principal doesn't have the permission.
    CANNOT_ACCESS = 2

    # The principal might have the permission, but the sender can't access all
    # of the information needed to fully evaluate the principal's access.
    UNKNOWN_INFO = 3

    # The principal might have the permission, but Policy Troubleshooter can't
    # fully evaluate the principal's access because the sender didn't provide
    # the required context to evaluate the condition.
    UNKNOWN_CONDITIONAL = 4
  end
end