Struct google_api_proto::google::cloud::policytroubleshooter::iam::v3::ExplainedDenyResource

pub struct ExplainedDenyResource {
    pub deny_access_state: i32,
    pub full_resource_name: String,
    pub explained_policies: Vec<ExplainedDenyPolicy>,
    pub relevance: i32,
}

Details about how a specific resource contributed to the deny policy evaluation.

Fields

deny_access_state: i32

Required. Indicates whether any policies attached to this resource deny the specific permission to the specified principal for the specified resource.

This field does not indicate whether the principal actually has the permission for the resource. There might be another policy that overrides this policy. To determine whether the principal actually has the permission, use the overall_access_state field in the [TroubleshootIamPolicyResponse][google.cloud.policytroubleshooter.iam.v3.TroubleshootIamPolicyResponse].

full_resource_name: String

The full resource name that identifies the resource. For example, //compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.

If the sender of the request does not have access to the policy, this field is omitted.

For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.

explained_policies: Vec<ExplainedDenyPolicy>

List of IAM deny policies that were evaluated to check the principal’s denied permissions, with annotations to indicate how each policy contributed to the final result.

relevance: i32

The relevance of this policy to the overall access state in the [TroubleshootIamPolicyResponse][google.cloud.policytroubleshooter.iam.v3.TroubleshootIamPolicyResponse].

If the sender of the request does not have access to the policy, this field is omitted.

Implementations

impl ExplainedDenyResource

pub fn deny_access_state(&self) -> DenyAccessState

Returns the enum value of deny_access_state, or the default if the field is set to an invalid enum value.

pub fn set_deny_access_state(&mut self, value: DenyAccessState)

Sets deny_access_state to the provided enum value.

pub fn relevance(&self) -> HeuristicRelevance

Returns the enum value of relevance, or the default if the field is set to an invalid enum value.

pub fn set_relevance(&mut self, value: HeuristicRelevance)

Sets relevance to the provided enum value.

Trait Implementations

impl Clone for ExplainedDenyResource

fn clone(&self) -> ExplainedDenyResource

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExplainedDenyResource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ExplainedDenyResource

fn default() -> Self

Returns the “default value” for a type.

impl Message for ExplainedDenyResource

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for ExplainedDenyResource

fn eq(&self, other: &ExplainedDenyResource) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ExplainedDenyResource