RuleResponse

data class RuleResponse(val action: String, val conditions: List<ConditionResponse>, val description: String, val in: List<String>, val logConfig: List<LogConfigResponse>, val notIn: List<String>, val permissions: List<String>)

A rule to be applied in a Policy.

Constructors

Link copied to clipboard
fun RuleResponse(action: String, conditions: List<ConditionResponse>, description: String, in: List<String>, logConfig: List<LogConfigResponse>, notIn: List<String>, permissions: List<String>)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard

Required

Link copied to clipboard

Additional restrictions that must be met. All conditions must pass for the rule to match.

Link copied to clipboard

Human-readable description of the rule.

Link copied to clipboard
val in: List<String>

If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.

Link copied to clipboard

The config returned to callers of CheckPolicy for any entries that match the LOG action.

Link copied to clipboard

If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).

Link copied to clipboard

A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '' matches all permissions, and a verb part of '' (e.g., 'storage.buckets.*') matches all verbs.