Struct google_api_proto::google::cloud::asset::v1::iam_policy_analysis_result::AccessControlList

pub struct AccessControlList {
    pub resources: Vec<Resource>,
    pub accesses: Vec<Access>,
    pub resource_edges: Vec<Edge>,
    pub condition_evaluation: Option<ConditionEvaluation>,
}

An access control list, derived from the above IAM policy binding, which contains a set of resources and accesses. May include one item from each set to compose an access control entry.

NOTICE that there could be multiple access control lists for one IAM policy binding. The access control lists are created based on resource and access combinations.

For example, assume we have the following cases in one IAM policy binding:

• Permission P1 and P2 apply to resource R1 and R2;
• Permission P3 applies to resource R2 and R3;

This will result in the following access control lists:

• AccessControlList 1: [R1, R2], [P1, P2]
• AccessControlList 2: [R2, R3], [P3]

Fields

resources: Vec<Resource>

The resources that match one of the following conditions:

• The resource_selector, if it is specified in request;
• Otherwise, resources reachable from the policy attached resource.

accesses: Vec<Access>

The accesses that match one of the following conditions:

• The access_selector, if it is specified in request;
• Otherwise, access specifiers reachable from the policy binding’s role.

resource_edges: Vec<Edge>

Resource edges of the graph starting from the policy attached resource to any descendant resources. The [Edge.source_node][google.cloud.asset.v1.IamPolicyAnalysisResult.Edge.source_node] contains the full resource name of a parent resource and [Edge.target_node][google.cloud.asset.v1.IamPolicyAnalysisResult.Edge.target_node] contains the full resource name of a child resource. This field is present only if the output_resource_edges option is enabled in request.

condition_evaluation: Option<ConditionEvaluation>

Condition evaluation for this AccessControlList, if there is a condition defined in the above IAM policy binding.

Trait Implementations

impl Clone for AccessControlList

fn clone(&self) -> AccessControlList

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessControlList

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AccessControlList

fn default() -> Self

Returns the “default value” for a type.

impl Message for AccessControlList

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode<B>(&self, buf: &mut B) -> Result<(), EncodeError>

where B: BufMut, Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited<B>(&self, buf: &mut B) -> Result<(), EncodeError>

where B: BufMut, Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode<B>(buf: B) -> Result<Self, DecodeError>

where B: Buf, Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited<B>(buf: B) -> Result<Self, DecodeError>

where B: Buf, Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge<B>(&mut self, buf: B) -> Result<(), DecodeError>

where B: Buf, Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited<B>(&mut self, buf: B) -> Result<(), DecodeError>

where B: Buf, Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for AccessControlList

fn eq(&self, other: &AccessControlList) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AccessControlList