DataAccessControlService exposes resources and endpoints related to data access control.
Equality
Instances of this class created via copy-construction or copy-assignment always compare equal. Instances created with equal std::shared_ptr<*Connection>
objects compare equal. Objects that compare equal share the same underlying resources.
Performance
Creating a new instance of this class is a relatively expensive operation, new objects establish new connections to the service. In contrast, copy-construction, move-construction, and the corresponding assignment operations are relatively efficient as the copies share all underlying resources.
Thread Safety
Concurrent access to different instances of this class, even if they compare equal, is guaranteed to work. Two or more threads operating on the same instance of this class is not guaranteed to work. Since copy-construction and move-construction is a relatively efficient operation, consider using such a copy when using this class from multiple threads.
Constructors
DataAccessControlServiceClient(DataAccessControlServiceClient const &)
Copy and move support
Parameter | |
---|---|
Name | Description |
|
DataAccessControlServiceClient const &
|
DataAccessControlServiceClient(DataAccessControlServiceClient &&)
Copy and move support
Parameter | |
---|---|
Name | Description |
|
DataAccessControlServiceClient &&
|
DataAccessControlServiceClient(std::shared_ptr< DataAccessControlServiceConnection >, Options)
Parameters | |
---|---|
Name | Description |
connection |
std::shared_ptr< DataAccessControlServiceConnection >
|
opts |
Options
|
Operators
operator=(DataAccessControlServiceClient const &)
Copy and move support
Parameter | |
---|---|
Name | Description |
|
DataAccessControlServiceClient const &
|
Returns | |
---|---|
Type | Description |
DataAccessControlServiceClient & |
operator=(DataAccessControlServiceClient &&)
Copy and move support
Parameter | |
---|---|
Name | Description |
|
DataAccessControlServiceClient &&
|
Returns | |
---|---|
Type | Description |
DataAccessControlServiceClient & |
Functions
CreateDataAccessLabel(std::string const &, google::cloud::chronicle::v1::DataAccessLabel const &, std::string const &, Options)
Creates a data access label.
Data access labels are applied to incoming event data and selected in data access scopes (another resource), and only users with scopes containing the label can see data with that label. Currently, the data access label resource only includes custom labels, which are labels that correspond to UDM queries over event data.
Parameters | |
---|---|
Name | Description |
parent |
std::string const &
Required. The parent resource where this Data Access Label will be created. Format: |
data_access_label |
google::cloud::chronicle::v1::DataAccessLabel const &
Required. Data access label to create. |
data_access_label_id |
std::string const &
Required. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessLabel > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessLabel) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
CreateDataAccessLabel(google::cloud::chronicle::v1::CreateDataAccessLabelRequest const &, Options)
Creates a data access label.
Data access labels are applied to incoming event data and selected in data access scopes (another resource), and only users with scopes containing the label can see data with that label. Currently, the data access label resource only includes custom labels, which are labels that correspond to UDM queries over event data.
Parameters | |
---|---|
Name | Description |
request |
google::cloud::chronicle::v1::CreateDataAccessLabelRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessLabel > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessLabel) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
GetDataAccessLabel(std::string const &, Options)
Gets a data access label.
Parameters | |
---|---|
Name | Description |
name |
std::string const &
Required. The ID of the data access label to retrieve. Format: |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessLabel > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessLabel) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
GetDataAccessLabel(google::cloud::chronicle::v1::GetDataAccessLabelRequest const &, Options)
Gets a data access label.
Parameters | |
---|---|
Name | Description |
request |
google::cloud::chronicle::v1::GetDataAccessLabelRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessLabel > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessLabel) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
ListDataAccessLabels(std::string const &, Options)
Lists all data access labels for the customer.
Parameters | |
---|---|
Name | Description |
parent |
std::string const &
Required. The parent resource where this data access label will be created. Format: |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StreamRange< google::cloud::chronicle::v1::DataAccessLabel > |
a StreamRange to iterate of the results. See the documentation of this type for details. In brief, this class has |
ListDataAccessLabels(google::cloud::chronicle::v1::ListDataAccessLabelsRequest, Options)
Lists all data access labels for the customer.
Parameters | |
---|---|
Name | Description |
request |
google::cloud::chronicle::v1::ListDataAccessLabelsRequest
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StreamRange< google::cloud::chronicle::v1::DataAccessLabel > |
a StreamRange to iterate of the results. See the documentation of this type for details. In brief, this class has |
UpdateDataAccessLabel(google::cloud::chronicle::v1::DataAccessLabel const &, google::protobuf::FieldMask const &, Options)
Updates a data access label.
Parameters | |
---|---|
Name | Description |
data_access_label |
google::cloud::chronicle::v1::DataAccessLabel const &
Required. The data access label to update. |
update_mask |
google::protobuf::FieldMask const &
The list of fields to update. If not included, all fields with a non-empty value will be overwritten. Currently, only the description and definition fields are supported for update; an update call that attempts to update any other fields will return INVALID_ARGUMENT. |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessLabel > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessLabel) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
UpdateDataAccessLabel(google::cloud::chronicle::v1::UpdateDataAccessLabelRequest const &, Options)
Updates a data access label.
Parameters | |
---|---|
Name | Description |
request |
google::cloud::chronicle::v1::UpdateDataAccessLabelRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessLabel > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessLabel) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
DeleteDataAccessLabel(std::string const &, Options)
Deletes a data access label.
When a label is deleted, new data that enters in the system will not receive the label, but the label will not be removed from old data that still refers to it.
Parameters | |
---|---|
Name | Description |
name |
std::string const &
Required. The ID of the data access label to delete. Format: |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
Status |
a |
DeleteDataAccessLabel(google::cloud::chronicle::v1::DeleteDataAccessLabelRequest const &, Options)
Deletes a data access label.
When a label is deleted, new data that enters in the system will not receive the label, but the label will not be removed from old data that still refers to it.
Parameters | |
---|---|
Name | Description |
request |
google::cloud::chronicle::v1::DeleteDataAccessLabelRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
Status |
a |
CreateDataAccessScope(std::string const &, google::cloud::chronicle::v1::DataAccessScope const &, std::string const &, Options)
Creates a data access scope.
Data access scope is a combination of allowed and denied labels attached to a permission group. If a scope has allowed labels A and B and denied labels C and D, then the group of people attached to the scope will have permissions to see all events labeled with A or B (or both) and not labeled with either C or D.
Parameters | |
---|---|
Name | Description |
parent |
std::string const &
Required. The parent resource where this Data Access Scope will be created. Format: |
data_access_scope |
google::cloud::chronicle::v1::DataAccessScope const &
Required. Data access scope to create. |
data_access_scope_id |
std::string const &
Required. The user provided scope id which will become the last part of the name of the scope resource. Needs to be compliant with https://google.aip.dev/122 |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessScope > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessScope) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
CreateDataAccessScope(google::cloud::chronicle::v1::CreateDataAccessScopeRequest const &, Options)
Creates a data access scope.
Data access scope is a combination of allowed and denied labels attached to a permission group. If a scope has allowed labels A and B and denied labels C and D, then the group of people attached to the scope will have permissions to see all events labeled with A or B (or both) and not labeled with either C or D.
Parameters | |
---|---|
Name | Description |
request |
google::cloud::chronicle::v1::CreateDataAccessScopeRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessScope > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessScope) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
GetDataAccessScope(std::string const &, Options)
Retrieves an existing data access scope.
Parameters | |
---|---|
Name | Description |
name |
std::string const &
Required. The ID of the data access scope to retrieve. Format: |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessScope > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessScope) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
GetDataAccessScope(google::cloud::chronicle::v1::GetDataAccessScopeRequest const &, Options)
Retrieves an existing data access scope.
Parameters | |
---|---|
Name | Description |
request |
google::cloud::chronicle::v1::GetDataAccessScopeRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessScope > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessScope) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
ListDataAccessScopes(std::string const &, Options)
Lists all existing data access scopes for the customer.
Parameters | |
---|---|
Name | Description |
parent |
std::string const &
Required. The parent resource where this data access scope will be created. Format: |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StreamRange< google::cloud::chronicle::v1::DataAccessScope > |
a StreamRange to iterate of the results. See the documentation of this type for details. In brief, this class has |
ListDataAccessScopes(google::cloud::chronicle::v1::ListDataAccessScopesRequest, Options)
Lists all existing data access scopes for the customer.
Parameters | |
---|---|
Name | Description |
request |
google::cloud::chronicle::v1::ListDataAccessScopesRequest
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StreamRange< google::cloud::chronicle::v1::DataAccessScope > |
a StreamRange to iterate of the results. See the documentation of this type for details. In brief, this class has |
UpdateDataAccessScope(google::cloud::chronicle::v1::DataAccessScope const &, google::protobuf::FieldMask const &, Options)
Updates a data access scope.
Parameters | |
---|---|
Name | Description |
data_access_scope |
google::cloud::chronicle::v1::DataAccessScope const &
Required. The data access scope to update. |
update_mask |
google::protobuf::FieldMask const &
The list of fields to update. If not included, all fields with a non-empty value will be overwritten. Currently, only the description, the allowed and denied labels list fields are supported for update; an update call that attempts to update any other fields will return INVALID_ARGUMENT. |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessScope > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessScope) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
UpdateDataAccessScope(google::cloud::chronicle::v1::UpdateDataAccessScopeRequest const &, Options)
Updates a data access scope.
Parameters | |
---|---|
Name | Description |
request |
google::cloud::chronicle::v1::UpdateDataAccessScopeRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::cloud::chronicle::v1::DataAccessScope > |
the result of the RPC. The response message type (google.cloud.chronicle.v1.DataAccessScope) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
DeleteDataAccessScope(std::string const &, Options)
Deletes a data access scope.
Parameters | |
---|---|
Name | Description |
name |
std::string const &
Required. The ID of the data access scope to delete. Format: |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
Status |
a |
DeleteDataAccessScope(google::cloud::chronicle::v1::DeleteDataAccessScopeRequest const &, Options)
Deletes a data access scope.
Parameters | |
---|---|
Name | Description |
request |
google::cloud::chronicle::v1::DeleteDataAccessScopeRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
Status |
a |
ListOperations(std::string const &, std::string const &, Options)
Lists operations that match the specified filter in the request.
If the server doesn't support this method, it returns UNIMPLEMENTED
.
Parameters | |
---|---|
Name | Description |
name |
std::string const &
The name of the operation's parent resource. |
filter |
std::string const &
The standard list filter. |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StreamRange< google::longrunning::Operation > |
a StreamRange to iterate of the results. See the documentation of this type for details. In brief, this class has |
ListOperations(google::longrunning::ListOperationsRequest, Options)
Lists operations that match the specified filter in the request.
If the server doesn't support this method, it returns UNIMPLEMENTED
.
Parameters | |
---|---|
Name | Description |
request |
google::longrunning::ListOperationsRequest
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StreamRange< google::longrunning::Operation > |
a StreamRange to iterate of the results. See the documentation of this type for details. In brief, this class has |
GetOperation(std::string const &, Options)
Gets the latest state of a long-running operation.
Clients can use this method to poll the operation result at intervals as recommended by the API service.
Parameters | |
---|---|
Name | Description |
name |
std::string const &
The name of the operation resource. |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::longrunning::Operation > |
the result of the RPC. The response message type (google.longrunning.Operation) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
GetOperation(google::longrunning::GetOperationRequest const &, Options)
Gets the latest state of a long-running operation.
Clients can use this method to poll the operation result at intervals as recommended by the API service.
Parameters | |
---|---|
Name | Description |
request |
google::longrunning::GetOperationRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
StatusOr< google::longrunning::Operation > |
the result of the RPC. The response message type (google.longrunning.Operation) is mapped to a C++ class using the Protobuf mapping rules. If the request fails, the |
DeleteOperation(std::string const &, Options)
Deletes a long-running operation.
This method indicates that the client is no longer interested in the operation result. It does not cancel the operation. If the server doesn't support this method, it returns google.rpc.Code.UNIMPLEMENTED
.
Parameters | |
---|---|
Name | Description |
name |
std::string const &
The name of the operation resource to be deleted. |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
Status |
a |
DeleteOperation(google::longrunning::DeleteOperationRequest const &, Options)
Deletes a long-running operation.
This method indicates that the client is no longer interested in the operation result. It does not cancel the operation. If the server doesn't support this method, it returns google.rpc.Code.UNIMPLEMENTED
.
Parameters | |
---|---|
Name | Description |
request |
google::longrunning::DeleteOperationRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
Status |
a |
CancelOperation(std::string const &, Options)
Starts asynchronous cancellation on a long-running operation.
The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns google.rpc.Code.UNIMPLEMENTED
. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1
, corresponding to Code.CANCELLED
.
Parameters | |
---|---|
Name | Description |
name |
std::string const &
The name of the operation resource to be cancelled. |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
Status |
a |
CancelOperation(google::longrunning::CancelOperationRequest const &, Options)
Starts asynchronous cancellation on a long-running operation.
The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns google.rpc.Code.UNIMPLEMENTED
. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1
, corresponding to Code.CANCELLED
.
Parameters | |
---|---|
Name | Description |
request |
google::longrunning::CancelOperationRequest const &
Unary RPCs, such as the one wrapped by this function, receive a single |
opts |
Options
Optional. Override the class-level options, such as retry and backoff policies. |
Returns | |
---|---|
Type | Description |
Status |
a |