Package com.google.cloud.audit

Interface AuthorizationInfoOrBuilder

All Superinterfaces:
com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder
All Known Implementing Classes:
AuthorizationInfo, AuthorizationInfo.Builder
public interface AuthorizationInfoOrBuilder extends com.google.protobuf.MessageOrBuilder

  • Method Summary

    Modifier and Type
    Method
    Description
    boolean
    getGranted()
    Whether or not authorization for `resource` and `permission` was granted.
    String
    getPermission()
    The required IAM permission.
    com.google.protobuf.ByteString
    getPermissionBytes()
    The required IAM permission.
    AuthorizationInfo.PermissionType
    getPermissionType()
    The type of the permission that was checked.
    int
    getPermissionTypeValue()
    The type of the permission that was checked.
    String
    getResource()
    The resource being accessed, as a REST-style or cloud resource string.
    AttributeContext.Resource
    getResourceAttributes()
    Resource attributes used in IAM condition evaluation.
    AttributeContext.ResourceOrBuilder
    getResourceAttributesOrBuilder()
    Resource attributes used in IAM condition evaluation.
    com.google.protobuf.ByteString
    getResourceBytes()
    The resource being accessed, as a REST-style or cloud resource string.
    boolean
    hasResourceAttributes()
    Resource attributes used in IAM condition evaluation.

    Methods inherited from interface com.google.protobuf.MessageLiteOrBuilder

    isInitialized

    Methods inherited from interface com.google.protobuf.MessageOrBuilder

    findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

  • Method Details

    • getResource

      String getResource()
       The resource being accessed, as a REST-style or cloud resource string.
 For example:

     bigquery.googleapis.com/projects/PROJECTID/datasets/DATASETID
 or
     projects/PROJECTID/datasets/DATASETID
      string resource = 1;
      Returns:
      The resource.

    • getResourceBytes

      com.google.protobuf.ByteString getResourceBytes()
       The resource being accessed, as a REST-style or cloud resource string.
 For example:

     bigquery.googleapis.com/projects/PROJECTID/datasets/DATASETID
 or
     projects/PROJECTID/datasets/DATASETID
      string resource = 1;
      Returns:
      The bytes for resource.

    • getPermission

      String getPermission()
       The required IAM permission.
      string permission = 2;
      Returns:
      The permission.

    • getPermissionBytes

      com.google.protobuf.ByteString getPermissionBytes()
       The required IAM permission.
      string permission = 2;
      Returns:
      The bytes for permission.

    • getGranted

      boolean getGranted()
       Whether or not authorization for `resource` and `permission`
 was granted.
      bool granted = 3;
      Returns:
      The granted.

    • hasResourceAttributes

      boolean hasResourceAttributes()
       Resource attributes used in IAM condition evaluation. This field contains
 resource attributes like resource type and resource name.

 To get the whole view of the attributes used in IAM
 condition evaluation, the user must also look into
 `AuditLog.request_metadata.request_attributes`.
      .google.rpc.context.AttributeContext.Resource resource_attributes = 5;
      Returns:
      Whether the resourceAttributes field is set.

    • getResourceAttributes

      AttributeContext.Resource getResourceAttributes()
       Resource attributes used in IAM condition evaluation. This field contains
 resource attributes like resource type and resource name.

 To get the whole view of the attributes used in IAM
 condition evaluation, the user must also look into
 `AuditLog.request_metadata.request_attributes`.
      .google.rpc.context.AttributeContext.Resource resource_attributes = 5;
      Returns:
      The resourceAttributes.

    • getResourceAttributesOrBuilder

      AttributeContext.ResourceOrBuilder getResourceAttributesOrBuilder()
       Resource attributes used in IAM condition evaluation. This field contains
 resource attributes like resource type and resource name.

 To get the whole view of the attributes used in IAM
 condition evaluation, the user must also look into
 `AuditLog.request_metadata.request_attributes`.
      .google.rpc.context.AttributeContext.Resource resource_attributes = 5;

    • getPermissionTypeValue

      int getPermissionTypeValue()
       The type of the permission that was checked. For data access audit logs
 this corresponds with the permission type that must be enabled in the
 project/folder/organization IAM policy in order for the log to be written.
      .google.cloud.audit.AuthorizationInfo.PermissionType permission_type = 7;
      Returns:
      The enum numeric value on the wire for permissionType.

    • getPermissionType

      AuthorizationInfo.PermissionType getPermissionType()
       The type of the permission that was checked. For data access audit logs
 this corresponds with the permission type that must be enabled in the
 project/folder/organization IAM policy in order for the log to be written.
      .google.cloud.audit.AuthorizationInfo.PermissionType permission_type = 7;
      Returns:
      The permissionType.