Struct google_api_proto::google::cloud::policytroubleshooter::iam::v3beta::ExplainedDenyPolicy

pub struct ExplainedDenyPolicy {
    pub deny_access_state: i32,
    pub policy: Option<Policy>,
    pub rule_explanations: Vec<DenyRuleExplanation>,
    pub relevance: i32,
}

Details about how a specific IAM deny policy [Policy][google.iam.v2.Policy] contributed to the access check.

Fields

deny_access_state: i32

Required. Indicates whether this policy denies the specified permission to the specified principal for the specified resource.

This field does not indicate whether the principal actually has the permission for the resource. There might be another policy that overrides this policy. To determine whether the principal actually has the permission, use the overall_access_state field in the [TroubleshootIamPolicyResponse][google.cloud.policytroubleshooter.iam.v3beta.TroubleshootIamPolicyResponse].

policy: Option<Policy>

The IAM deny policy attached to the resource.

If the sender of the request does not have access to the policy, this field is omitted.

rule_explanations: Vec<DenyRuleExplanation>

Details about how each rule in the policy affects the principal’s inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

relevance: i32

The relevance of this policy to the overall access state in the [TroubleshootIamPolicyResponse][google.cloud.policytroubleshooter.iam.v3beta.TroubleshootIamPolicyResponse].

If the sender of the request does not have access to the policy, this field is omitted.

Implementations

impl ExplainedDenyPolicy

pub fn deny_access_state(&self) -> DenyAccessState

Returns the enum value of deny_access_state, or the default if the field is set to an invalid enum value.

pub fn set_deny_access_state(&mut self, value: DenyAccessState)

Sets deny_access_state to the provided enum value.

pub fn relevance(&self) -> HeuristicRelevance

Returns the enum value of relevance, or the default if the field is set to an invalid enum value.

pub fn set_relevance(&mut self, value: HeuristicRelevance)

Sets relevance to the provided enum value.

Trait Implementations

impl Clone for ExplainedDenyPolicy

fn clone(&self) -> ExplainedDenyPolicy

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExplainedDenyPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ExplainedDenyPolicy

fn default() -> Self

Returns the “default value” for a type.

impl Message for ExplainedDenyPolicy

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode<B>(&self, buf: &mut B) -> Result<(), EncodeError>

where B: BufMut, Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited<B>(&self, buf: &mut B) -> Result<(), EncodeError>

where B: BufMut, Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode<B>(buf: B) -> Result<Self, DecodeError>

where B: Buf, Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited<B>(buf: B) -> Result<Self, DecodeError>

where B: Buf, Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge<B>(&mut self, buf: B) -> Result<(), DecodeError>

where B: Buf, Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited<B>(&mut self, buf: B) -> Result<(), DecodeError>

where B: Buf, Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for ExplainedDenyPolicy

fn eq(&self, other: &ExplainedDenyPolicy) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ExplainedDenyPolicy