- 1.52.0 (latest)
- 1.51.0
- 1.50.0
- 1.48.0
- 1.47.0
- 1.46.0
- 1.45.0
- 1.44.0
- 1.43.0
- 1.42.0
- 1.41.0
- 1.40.0
- 1.39.0
- 1.38.0
- 1.36.0
- 1.35.0
- 1.34.0
- 1.33.0
- 1.32.0
- 1.31.0
- 1.30.0
- 1.29.0
- 1.28.0
- 1.27.0
- 1.26.0
- 1.23.0
- 1.22.0
- 1.21.0
- 1.20.0
- 1.19.0
- 1.18.0
- 1.17.0
- 1.16.0
- 1.15.0
- 1.14.0
- 1.13.0
- 1.12.0
- 1.11.0
- 1.10.0
- 1.8.0
- 1.7.0
- 1.6.0
- 1.5.0
- 1.4.0
- 1.3.0
- 1.2.6
- 1.1.0
- 1.0.4
- 0.4.4
public final class DenyRuleExplanation extends GeneratedMessageV3 implements DenyRuleExplanationOrBuilderDetails about how a deny rule in a deny policy affects a principal's ability to use a permission.
Protobuf type google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation
Inheritance
Object > AbstractMessageLite<MessageType,BuilderType> > AbstractMessage > GeneratedMessageV3 > DenyRuleExplanationImplements
DenyRuleExplanationOrBuilderStatic Fields
COMBINED_DENIED_PERMISSION_FIELD_NUMBER
public static final int COMBINED_DENIED_PERMISSION_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
COMBINED_DENIED_PRINCIPAL_FIELD_NUMBER
public static final int COMBINED_DENIED_PRINCIPAL_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
COMBINED_EXCEPTION_PERMISSION_FIELD_NUMBER
public static final int COMBINED_EXCEPTION_PERMISSION_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
COMBINED_EXCEPTION_PRINCIPAL_FIELD_NUMBER
public static final int COMBINED_EXCEPTION_PRINCIPAL_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
CONDITION_EXPLANATION_FIELD_NUMBER
public static final int CONDITION_EXPLANATION_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
CONDITION_FIELD_NUMBER
public static final int CONDITION_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
DENIED_PERMISSIONS_FIELD_NUMBER
public static final int DENIED_PERMISSIONS_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
DENIED_PRINCIPALS_FIELD_NUMBER
public static final int DENIED_PRINCIPALS_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
DENY_ACCESS_STATE_FIELD_NUMBER
public static final int DENY_ACCESS_STATE_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
EXCEPTION_PERMISSIONS_FIELD_NUMBER
public static final int EXCEPTION_PERMISSIONS_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
EXCEPTION_PRINCIPALS_FIELD_NUMBER
public static final int EXCEPTION_PRINCIPALS_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
RELEVANCE_FIELD_NUMBER
public static final int RELEVANCE_FIELD_NUMBER| Field Value | |
|---|---|
| Type | Description |
int |
|
Static Methods
getDefaultInstance()
public static DenyRuleExplanation getDefaultInstance()| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()| Returns | |
|---|---|
| Type | Description |
Descriptor |
|
newBuilder()
public static DenyRuleExplanation.Builder newBuilder()| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.Builder |
|
newBuilder(DenyRuleExplanation prototype)
public static DenyRuleExplanation.Builder newBuilder(DenyRuleExplanation prototype)| Parameter | |
|---|---|
| Name | Description |
prototype |
DenyRuleExplanation |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.Builder |
|
parseDelimitedFrom(InputStream input)
public static DenyRuleExplanation parseDelimitedFrom(InputStream input)| Parameter | |
|---|---|
| Name | Description |
input |
InputStream |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
IOException |
|
parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
public static DenyRuleExplanation parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)| Parameters | |
|---|---|
| Name | Description |
input |
InputStream |
extensionRegistry |
ExtensionRegistryLite |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
IOException |
|
parseFrom(byte[] data)
public static DenyRuleExplanation parseFrom(byte[] data)| Parameter | |
|---|---|
| Name | Description |
data |
byte[] |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
InvalidProtocolBufferException |
|
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static DenyRuleExplanation parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)| Parameters | |
|---|---|
| Name | Description |
data |
byte[] |
extensionRegistry |
ExtensionRegistryLite |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
InvalidProtocolBufferException |
|
parseFrom(ByteString data)
public static DenyRuleExplanation parseFrom(ByteString data)| Parameter | |
|---|---|
| Name | Description |
data |
ByteString |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
InvalidProtocolBufferException |
|
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static DenyRuleExplanation parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)| Parameters | |
|---|---|
| Name | Description |
data |
ByteString |
extensionRegistry |
ExtensionRegistryLite |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
InvalidProtocolBufferException |
|
parseFrom(CodedInputStream input)
public static DenyRuleExplanation parseFrom(CodedInputStream input)| Parameter | |
|---|---|
| Name | Description |
input |
CodedInputStream |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
IOException |
|
parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
public static DenyRuleExplanation parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)| Parameters | |
|---|---|
| Name | Description |
input |
CodedInputStream |
extensionRegistry |
ExtensionRegistryLite |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
IOException |
|
parseFrom(InputStream input)
public static DenyRuleExplanation parseFrom(InputStream input)| Parameter | |
|---|---|
| Name | Description |
input |
InputStream |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
IOException |
|
parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
public static DenyRuleExplanation parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)| Parameters | |
|---|---|
| Name | Description |
input |
InputStream |
extensionRegistry |
ExtensionRegistryLite |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
IOException |
|
parseFrom(ByteBuffer data)
public static DenyRuleExplanation parseFrom(ByteBuffer data)| Parameter | |
|---|---|
| Name | Description |
data |
ByteBuffer |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
InvalidProtocolBufferException |
|
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static DenyRuleExplanation parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)| Parameters | |
|---|---|
| Name | Description |
data |
ByteBuffer |
extensionRegistry |
ExtensionRegistryLite |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
| Exceptions | |
|---|---|
| Type | Description |
InvalidProtocolBufferException |
|
parser()
public static Parser<DenyRuleExplanation> parser()| Returns | |
|---|---|
| Type | Description |
Parser<DenyRuleExplanation> |
|
Methods
containsDeniedPermissions(String key)
public boolean containsDeniedPermissions(String key)Lists all denied permissions in the deny rule and indicates whether each permission matches the permission in the request.
Each key identifies a denied permission in the rule, and each value indicates whether the denied permission matches the permission in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching> denied_permissions = 3;
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
boolean |
|
containsDeniedPrincipals(String key)
public boolean containsDeniedPrincipals(String key)Lists all denied principals in the deny rule and indicates whether each principal matches the principal in the request, either directly or through membership in a principal set.
Each key identifies a denied principal in the rule, and each value indicates whether the denied principal matches the principal in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching> denied_principals = 7;
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
boolean |
|
containsExceptionPermissions(String key)
public boolean containsExceptionPermissions(String key)Lists all exception permissions in the deny rule and indicates whether each permission matches the permission in the request.
Each key identifies a exception permission in the rule, and each value indicates whether the exception permission matches the permission in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching> exception_permissions = 5;
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
boolean |
|
containsExceptionPrincipals(String key)
public boolean containsExceptionPrincipals(String key)Lists all exception principals in the deny rule and indicates whether each principal matches the principal in the request, either directly or through membership in a principal set.
Each key identifies a exception principal in the rule, and each value indicates whether the exception principal matches the principal in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching> exception_principals = 9;
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
boolean |
|
equals(Object obj)
public boolean equals(Object obj)| Parameter | |
|---|---|
| Name | Description |
obj |
Object |
| Returns | |
|---|---|
| Type | Description |
boolean |
|
getCombinedDeniedPermission()
public DenyRuleExplanation.AnnotatedPermissionMatching getCombinedDeniedPermission()Indicates whether the permission in the request is listed as a denied permission in the deny rule.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching combined_denied_permission = 2;
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedPermissionMatching |
The combinedDeniedPermission. |
getCombinedDeniedPermissionOrBuilder()
public DenyRuleExplanation.AnnotatedPermissionMatchingOrBuilder getCombinedDeniedPermissionOrBuilder()Indicates whether the permission in the request is listed as a denied permission in the deny rule.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching combined_denied_permission = 2;
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedPermissionMatchingOrBuilder |
|
getCombinedDeniedPrincipal()
public DenyRuleExplanation.AnnotatedDenyPrincipalMatching getCombinedDeniedPrincipal()Indicates whether the principal is listed as a denied principal in the deny rule, either directly or through membership in a principal set.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching combined_denied_principal = 6;
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedDenyPrincipalMatching |
The combinedDeniedPrincipal. |
getCombinedDeniedPrincipalOrBuilder()
public DenyRuleExplanation.AnnotatedDenyPrincipalMatchingOrBuilder getCombinedDeniedPrincipalOrBuilder()Indicates whether the principal is listed as a denied principal in the deny rule, either directly or through membership in a principal set.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching combined_denied_principal = 6;
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedDenyPrincipalMatchingOrBuilder |
|
getCombinedExceptionPermission()
public DenyRuleExplanation.AnnotatedPermissionMatching getCombinedExceptionPermission()Indicates whether the permission in the request is listed as an exception permission in the deny rule.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching combined_exception_permission = 4;
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedPermissionMatching |
The combinedExceptionPermission. |
getCombinedExceptionPermissionOrBuilder()
public DenyRuleExplanation.AnnotatedPermissionMatchingOrBuilder getCombinedExceptionPermissionOrBuilder()Indicates whether the permission in the request is listed as an exception permission in the deny rule.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching combined_exception_permission = 4;
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedPermissionMatchingOrBuilder |
|
getCombinedExceptionPrincipal()
public DenyRuleExplanation.AnnotatedDenyPrincipalMatching getCombinedExceptionPrincipal()Indicates whether the principal is listed as an exception principal in the deny rule, either directly or through membership in a principal set.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching combined_exception_principal = 8;
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedDenyPrincipalMatching |
The combinedExceptionPrincipal. |
getCombinedExceptionPrincipalOrBuilder()
public DenyRuleExplanation.AnnotatedDenyPrincipalMatchingOrBuilder getCombinedExceptionPrincipalOrBuilder()Indicates whether the principal is listed as an exception principal in the deny rule, either directly or through membership in a principal set.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching combined_exception_principal = 8;
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedDenyPrincipalMatchingOrBuilder |
|
getCondition()
public Expr getCondition()A condition expression that specifies when the deny rule denies the principal access.
To learn about IAM Conditions, see https://cloud.google.com/iam/help/conditions/overview.
.google.type.Expr condition = 11;
| Returns | |
|---|---|
| Type | Description |
com.google.type.Expr |
The condition. |
getConditionExplanation()
public ConditionExplanation getConditionExplanation()Condition evaluation state for this role binding.
.google.cloud.policytroubleshooter.iam.v3.ConditionExplanation condition_explanation = 12;
| Returns | |
|---|---|
| Type | Description |
ConditionExplanation |
The conditionExplanation. |
getConditionExplanationOrBuilder()
public ConditionExplanationOrBuilder getConditionExplanationOrBuilder()Condition evaluation state for this role binding.
.google.cloud.policytroubleshooter.iam.v3.ConditionExplanation condition_explanation = 12;
| Returns | |
|---|---|
| Type | Description |
ConditionExplanationOrBuilder |
|
getConditionOrBuilder()
public ExprOrBuilder getConditionOrBuilder()A condition expression that specifies when the deny rule denies the principal access.
To learn about IAM Conditions, see https://cloud.google.com/iam/help/conditions/overview.
.google.type.Expr condition = 11;
| Returns | |
|---|---|
| Type | Description |
com.google.type.ExprOrBuilder |
|
getDefaultInstanceForType()
public DenyRuleExplanation getDefaultInstanceForType()| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation |
|
getDeniedPermissions() (deprecated)
public Map<String,DenyRuleExplanation.AnnotatedPermissionMatching> getDeniedPermissions()Use #getDeniedPermissionsMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AnnotatedPermissionMatching> |
|
getDeniedPermissionsCount()
public int getDeniedPermissionsCount()Lists all denied permissions in the deny rule and indicates whether each permission matches the permission in the request.
Each key identifies a denied permission in the rule, and each value indicates whether the denied permission matches the permission in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching> denied_permissions = 3;
| Returns | |
|---|---|
| Type | Description |
int |
|
getDeniedPermissionsMap()
public Map<String,DenyRuleExplanation.AnnotatedPermissionMatching> getDeniedPermissionsMap()Lists all denied permissions in the deny rule and indicates whether each permission matches the permission in the request.
Each key identifies a denied permission in the rule, and each value indicates whether the denied permission matches the permission in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching> denied_permissions = 3;
| Returns | |
|---|---|
| Type | Description |
Map<String,AnnotatedPermissionMatching> |
|
getDeniedPermissionsOrDefault(String key, DenyRuleExplanation.AnnotatedPermissionMatching defaultValue)
public DenyRuleExplanation.AnnotatedPermissionMatching getDeniedPermissionsOrDefault(String key, DenyRuleExplanation.AnnotatedPermissionMatching defaultValue)Lists all denied permissions in the deny rule and indicates whether each permission matches the permission in the request.
Each key identifies a denied permission in the rule, and each value indicates whether the denied permission matches the permission in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching> denied_permissions = 3;
| Parameters | |
|---|---|
| Name | Description |
key |
String |
defaultValue |
DenyRuleExplanation.AnnotatedPermissionMatching |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedPermissionMatching |
|
getDeniedPermissionsOrThrow(String key)
public DenyRuleExplanation.AnnotatedPermissionMatching getDeniedPermissionsOrThrow(String key)Lists all denied permissions in the deny rule and indicates whether each permission matches the permission in the request.
Each key identifies a denied permission in the rule, and each value indicates whether the denied permission matches the permission in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching> denied_permissions = 3;
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedPermissionMatching |
|
getDeniedPrincipals() (deprecated)
public Map<String,DenyRuleExplanation.AnnotatedDenyPrincipalMatching> getDeniedPrincipals()Use #getDeniedPrincipalsMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AnnotatedDenyPrincipalMatching> |
|
getDeniedPrincipalsCount()
public int getDeniedPrincipalsCount()Lists all denied principals in the deny rule and indicates whether each principal matches the principal in the request, either directly or through membership in a principal set.
Each key identifies a denied principal in the rule, and each value indicates whether the denied principal matches the principal in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching> denied_principals = 7;
| Returns | |
|---|---|
| Type | Description |
int |
|
getDeniedPrincipalsMap()
public Map<String,DenyRuleExplanation.AnnotatedDenyPrincipalMatching> getDeniedPrincipalsMap()Lists all denied principals in the deny rule and indicates whether each principal matches the principal in the request, either directly or through membership in a principal set.
Each key identifies a denied principal in the rule, and each value indicates whether the denied principal matches the principal in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching> denied_principals = 7;
| Returns | |
|---|---|
| Type | Description |
Map<String,AnnotatedDenyPrincipalMatching> |
|
getDeniedPrincipalsOrDefault(String key, DenyRuleExplanation.AnnotatedDenyPrincipalMatching defaultValue)
public DenyRuleExplanation.AnnotatedDenyPrincipalMatching getDeniedPrincipalsOrDefault(String key, DenyRuleExplanation.AnnotatedDenyPrincipalMatching defaultValue)Lists all denied principals in the deny rule and indicates whether each principal matches the principal in the request, either directly or through membership in a principal set.
Each key identifies a denied principal in the rule, and each value indicates whether the denied principal matches the principal in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching> denied_principals = 7;
| Parameters | |
|---|---|
| Name | Description |
key |
String |
defaultValue |
DenyRuleExplanation.AnnotatedDenyPrincipalMatching |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedDenyPrincipalMatching |
|
getDeniedPrincipalsOrThrow(String key)
public DenyRuleExplanation.AnnotatedDenyPrincipalMatching getDeniedPrincipalsOrThrow(String key)Lists all denied principals in the deny rule and indicates whether each principal matches the principal in the request, either directly or through membership in a principal set.
Each key identifies a denied principal in the rule, and each value indicates whether the denied principal matches the principal in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching> denied_principals = 7;
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedDenyPrincipalMatching |
|
getDenyAccessState()
public DenyAccessState getDenyAccessState()Required. Indicates whether this rule denies the specified permission to the specified principal for the specified resource.
This field does not indicate whether the principal is actually denied on
the permission for the resource. There might be another rule that overrides
this rule. To determine whether the principal actually has the permission,
use the overall_access_state field in the
TroubleshootIamPolicyResponse.
.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
DenyAccessState |
The denyAccessState. |
getDenyAccessStateValue()
public int getDenyAccessStateValue()Required. Indicates whether this rule denies the specified permission to the specified principal for the specified resource.
This field does not indicate whether the principal is actually denied on
the permission for the resource. There might be another rule that overrides
this rule. To determine whether the principal actually has the permission,
use the overall_access_state field in the
TroubleshootIamPolicyResponse.
.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
int |
The enum numeric value on the wire for denyAccessState. |
getExceptionPermissions() (deprecated)
public Map<String,DenyRuleExplanation.AnnotatedPermissionMatching> getExceptionPermissions()Use #getExceptionPermissionsMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AnnotatedPermissionMatching> |
|
getExceptionPermissionsCount()
public int getExceptionPermissionsCount()Lists all exception permissions in the deny rule and indicates whether each permission matches the permission in the request.
Each key identifies a exception permission in the rule, and each value indicates whether the exception permission matches the permission in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching> exception_permissions = 5;
| Returns | |
|---|---|
| Type | Description |
int |
|
getExceptionPermissionsMap()
public Map<String,DenyRuleExplanation.AnnotatedPermissionMatching> getExceptionPermissionsMap()Lists all exception permissions in the deny rule and indicates whether each permission matches the permission in the request.
Each key identifies a exception permission in the rule, and each value indicates whether the exception permission matches the permission in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching> exception_permissions = 5;
| Returns | |
|---|---|
| Type | Description |
Map<String,AnnotatedPermissionMatching> |
|
getExceptionPermissionsOrDefault(String key, DenyRuleExplanation.AnnotatedPermissionMatching defaultValue)
public DenyRuleExplanation.AnnotatedPermissionMatching getExceptionPermissionsOrDefault(String key, DenyRuleExplanation.AnnotatedPermissionMatching defaultValue)Lists all exception permissions in the deny rule and indicates whether each permission matches the permission in the request.
Each key identifies a exception permission in the rule, and each value indicates whether the exception permission matches the permission in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching> exception_permissions = 5;
| Parameters | |
|---|---|
| Name | Description |
key |
String |
defaultValue |
DenyRuleExplanation.AnnotatedPermissionMatching |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedPermissionMatching |
|
getExceptionPermissionsOrThrow(String key)
public DenyRuleExplanation.AnnotatedPermissionMatching getExceptionPermissionsOrThrow(String key)Lists all exception permissions in the deny rule and indicates whether each permission matches the permission in the request.
Each key identifies a exception permission in the rule, and each value indicates whether the exception permission matches the permission in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching> exception_permissions = 5;
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedPermissionMatching |
|
getExceptionPrincipals() (deprecated)
public Map<String,DenyRuleExplanation.AnnotatedDenyPrincipalMatching> getExceptionPrincipals()Use #getExceptionPrincipalsMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AnnotatedDenyPrincipalMatching> |
|
getExceptionPrincipalsCount()
public int getExceptionPrincipalsCount()Lists all exception principals in the deny rule and indicates whether each principal matches the principal in the request, either directly or through membership in a principal set.
Each key identifies a exception principal in the rule, and each value indicates whether the exception principal matches the principal in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching> exception_principals = 9;
| Returns | |
|---|---|
| Type | Description |
int |
|
getExceptionPrincipalsMap()
public Map<String,DenyRuleExplanation.AnnotatedDenyPrincipalMatching> getExceptionPrincipalsMap()Lists all exception principals in the deny rule and indicates whether each principal matches the principal in the request, either directly or through membership in a principal set.
Each key identifies a exception principal in the rule, and each value indicates whether the exception principal matches the principal in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching> exception_principals = 9;
| Returns | |
|---|---|
| Type | Description |
Map<String,AnnotatedDenyPrincipalMatching> |
|
getExceptionPrincipalsOrDefault(String key, DenyRuleExplanation.AnnotatedDenyPrincipalMatching defaultValue)
public DenyRuleExplanation.AnnotatedDenyPrincipalMatching getExceptionPrincipalsOrDefault(String key, DenyRuleExplanation.AnnotatedDenyPrincipalMatching defaultValue)Lists all exception principals in the deny rule and indicates whether each principal matches the principal in the request, either directly or through membership in a principal set.
Each key identifies a exception principal in the rule, and each value indicates whether the exception principal matches the principal in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching> exception_principals = 9;
| Parameters | |
|---|---|
| Name | Description |
key |
String |
defaultValue |
DenyRuleExplanation.AnnotatedDenyPrincipalMatching |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedDenyPrincipalMatching |
|
getExceptionPrincipalsOrThrow(String key)
public DenyRuleExplanation.AnnotatedDenyPrincipalMatching getExceptionPrincipalsOrThrow(String key)Lists all exception principals in the deny rule and indicates whether each principal matches the principal in the request, either directly or through membership in a principal set.
Each key identifies a exception principal in the rule, and each value indicates whether the exception principal matches the principal in the request.
map<string, .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching> exception_principals = 9;
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.AnnotatedDenyPrincipalMatching |
|
getParserForType()
public Parser<DenyRuleExplanation> getParserForType()| Returns | |
|---|---|
| Type | Description |
Parser<DenyRuleExplanation> |
|
getRelevance()
public HeuristicRelevance getRelevance()The relevance of this role binding to the overall determination for the entire policy.
.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 10;
| Returns | |
|---|---|
| Type | Description |
HeuristicRelevance |
The relevance. |
getRelevanceValue()
public int getRelevanceValue()The relevance of this role binding to the overall determination for the entire policy.
.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 10;
| Returns | |
|---|---|
| Type | Description |
int |
The enum numeric value on the wire for relevance. |
getSerializedSize()
public int getSerializedSize()| Returns | |
|---|---|
| Type | Description |
int |
|
hasCombinedDeniedPermission()
public boolean hasCombinedDeniedPermission()Indicates whether the permission in the request is listed as a denied permission in the deny rule.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching combined_denied_permission = 2;
| Returns | |
|---|---|
| Type | Description |
boolean |
Whether the combinedDeniedPermission field is set. |
hasCombinedDeniedPrincipal()
public boolean hasCombinedDeniedPrincipal()Indicates whether the principal is listed as a denied principal in the deny rule, either directly or through membership in a principal set.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching combined_denied_principal = 6;
| Returns | |
|---|---|
| Type | Description |
boolean |
Whether the combinedDeniedPrincipal field is set. |
hasCombinedExceptionPermission()
public boolean hasCombinedExceptionPermission()Indicates whether the permission in the request is listed as an exception permission in the deny rule.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching combined_exception_permission = 4;
| Returns | |
|---|---|
| Type | Description |
boolean |
Whether the combinedExceptionPermission field is set. |
hasCombinedExceptionPrincipal()
public boolean hasCombinedExceptionPrincipal()Indicates whether the principal is listed as an exception principal in the deny rule, either directly or through membership in a principal set.
.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching combined_exception_principal = 8;
| Returns | |
|---|---|
| Type | Description |
boolean |
Whether the combinedExceptionPrincipal field is set. |
hasCondition()
public boolean hasCondition()A condition expression that specifies when the deny rule denies the principal access.
To learn about IAM Conditions, see https://cloud.google.com/iam/help/conditions/overview.
.google.type.Expr condition = 11;
| Returns | |
|---|---|
| Type | Description |
boolean |
Whether the condition field is set. |
hasConditionExplanation()
public boolean hasConditionExplanation()Condition evaluation state for this role binding.
.google.cloud.policytroubleshooter.iam.v3.ConditionExplanation condition_explanation = 12;
| Returns | |
|---|---|
| Type | Description |
boolean |
Whether the conditionExplanation field is set. |
hashCode()
public int hashCode()| Returns | |
|---|---|
| Type | Description |
int |
|
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()| Returns | |
|---|---|
| Type | Description |
FieldAccessorTable |
|
internalGetMapFieldReflection(int number)
protected MapFieldReflectionAccessor internalGetMapFieldReflection(int number)| Parameter | |
|---|---|
| Name | Description |
number |
int |
| Returns | |
|---|---|
| Type | Description |
com.google.protobuf.MapFieldReflectionAccessor |
|
isInitialized()
public final boolean isInitialized()| Returns | |
|---|---|
| Type | Description |
boolean |
|
newBuilderForType()
public DenyRuleExplanation.Builder newBuilderForType()| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.Builder |
|
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected DenyRuleExplanation.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)| Parameter | |
|---|---|
| Name | Description |
parent |
BuilderParent |
| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.Builder |
|
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)| Parameter | |
|---|---|
| Name | Description |
unused |
UnusedPrivateParameter |
| Returns | |
|---|---|
| Type | Description |
Object |
|
toBuilder()
public DenyRuleExplanation.Builder toBuilder()| Returns | |
|---|---|
| Type | Description |
DenyRuleExplanation.Builder |
|
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)| Parameter | |
|---|---|
| Name | Description |
output |
CodedOutputStream |
| Exceptions | |
|---|---|
| Type | Description |
IOException |
|