Struct google_api_proto::google::cloud::policytroubleshooter::iam::v3beta::ExplainedAllowPolicy

pub struct ExplainedAllowPolicy {
    pub allow_access_state: i32,
    pub full_resource_name: String,
    pub binding_explanations: Vec<AllowBindingExplanation>,
    pub relevance: i32,
    pub policy: Option<Policy>,
}

Details about how a specific IAM allow policy contributed to the final access state.

Fields

allow_access_state: i32

Required. Indicates whether this policy provides the specified permission to the specified principal for the specified resource.

This field does not indicate whether the principal actually has the permission for the resource. There might be another policy that overrides this policy. To determine whether the principal actually has the permission, use the overall_access_state field in the [TroubleshootIamPolicyResponse][google.cloud.policytroubleshooter.iam.v3beta.TroubleshootIamPolicyResponse].

full_resource_name: String

The full resource name that identifies the resource. For example, //compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.

If the sender of the request does not have access to the policy, this field is omitted.

For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.

binding_explanations: Vec<AllowBindingExplanation>

Details about how each role binding in the policy affects the principal’s ability, or inability, to use the permission for the resource. The order of the role bindings matches the role binding order in the policy.

If the sender of the request does not have access to the policy, this field is omitted.

relevance: i32

The relevance of this policy to the overall access state in the [TroubleshootIamPolicyResponse][google.cloud.policytroubleshooter.iam.v3beta.TroubleshootIamPolicyResponse].

If the sender of the request does not have access to the policy, this field is omitted.

policy: Option<Policy>

The IAM allow policy attached to the resource.

If the sender of the request does not have access to the policy, this field is empty.

Implementations

impl ExplainedAllowPolicy

pub fn allow_access_state(&self) -> AllowAccessState

Returns the enum value of allow_access_state, or the default if the field is set to an invalid enum value.

pub fn set_allow_access_state(&mut self, value: AllowAccessState)

Sets allow_access_state to the provided enum value.

pub fn relevance(&self) -> HeuristicRelevance

Returns the enum value of relevance, or the default if the field is set to an invalid enum value.

pub fn set_relevance(&mut self, value: HeuristicRelevance)

Sets relevance to the provided enum value.

Trait Implementations

impl Clone for ExplainedAllowPolicy

fn clone(&self) -> ExplainedAllowPolicy

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExplainedAllowPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ExplainedAllowPolicy

fn default() -> Self

Returns the “default value” for a type.

impl Message for ExplainedAllowPolicy

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode<B>(&self, buf: &mut B) -> Result<(), EncodeError>

where B: BufMut, Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited<B>(&self, buf: &mut B) -> Result<(), EncodeError>

where B: BufMut, Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode<B>(buf: B) -> Result<Self, DecodeError>

where B: Buf, Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited<B>(buf: B) -> Result<Self, DecodeError>

where B: Buf, Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge<B>(&mut self, buf: B) -> Result<(), DecodeError>

where B: Buf, Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited<B>(&mut self, buf: B) -> Result<(), DecodeError>

where B: Buf, Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for ExplainedAllowPolicy

fn eq(&self, other: &ExplainedAllowPolicy) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ExplainedAllowPolicy