Struct BindingExplanation

pub struct BindingExplanation {
    pub access: i32,
    pub role: String,
    pub role_permission: i32,
    pub role_permission_relevance: i32,
    pub memberships: HashMap<String, AnnotatedMembership>,
    pub relevance: i32,
    pub condition: Option<Expr>,
}

Details about how a binding in a policy affects a member’s ability to use a permission.

Fields

access: i32

Required. Indicates whether this binding provides the specified permission to the specified member for the specified resource.

This field does not indicate whether the member actually has the permission for the resource. There might be another binding that overrides this binding. To determine whether the member actually has the permission, use the access field in the [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].

role: String

The role that this binding grants. For example, roles/compute.serviceAgent.

For a complete list of predefined IAM roles, as well as the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.

role_permission: i32

Indicates whether the role granted by this binding contains the specified permission.

role_permission_relevance: i32

The relevance of the permission’s existence, or nonexistence, in the role to the overall determination for the entire policy.

memberships: HashMap<String, AnnotatedMembership>

Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request.

For example, suppose that a binding includes the following members:

• user:alice@example.com
• group:product-eng@example.com

You want to troubleshoot access for user:bob@example.com. This user is a member of the group group:product-eng@example.com.

For the first member in the binding, the key is user:alice@example.com, and the membership field in the value is set to MEMBERSHIP_NOT_INCLUDED.

For the second member in the binding, the key is group:product-eng@example.com, and the membership field in the value is set to MEMBERSHIP_INCLUDED.

relevance: i32

The relevance of this binding to the overall determination for the entire policy.

condition: Option<Expr>

A condition expression that prevents access unless the expression evaluates to true.

To learn about IAM Conditions, see http://cloud.google.com/iam/help/conditions/overview.

Implementations

impl BindingExplanation

pub fn access(&self) -> AccessState

Returns the enum value of access, or the default if the field is set to an invalid enum value.

pub fn set_access(&mut self, value: AccessState)

Sets access to the provided enum value.

pub fn role_permission(&self) -> RolePermission

Returns the enum value of role_permission, or the default if the field is set to an invalid enum value.

pub fn set_role_permission(&mut self, value: RolePermission)

Sets role_permission to the provided enum value.

pub fn role_permission_relevance(&self) -> HeuristicRelevance

Returns the enum value of role_permission_relevance, or the default if the field is set to an invalid enum value.

pub fn set_role_permission_relevance(&mut self, value: HeuristicRelevance)

Sets role_permission_relevance to the provided enum value.

pub fn relevance(&self) -> HeuristicRelevance

Returns the enum value of relevance, or the default if the field is set to an invalid enum value.

pub fn set_relevance(&mut self, value: HeuristicRelevance)

Sets relevance to the provided enum value.

Trait Implementations

impl Clone for BindingExplanation

fn clone(&self) -> BindingExplanation

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BindingExplanation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for BindingExplanation

fn default() -> BindingExplanation

Returns the “default value” for a type.

impl Message for BindingExplanation

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode<B>(&self, buf: &mut B) -> Result<(), EncodeError>

where B: BufMut, Self: Sized,

Encodes the message to a buffer.

fn encode_length_delimited<B>(&self, buf: &mut B) -> Result<(), EncodeError>

where B: BufMut, Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn decode<B>(buf: B) -> Result<Self, DecodeError>

where B: Buf, Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited<B>(buf: B) -> Result<Self, DecodeError>

where B: Buf, Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge<B>(&mut self, buf: B) -> Result<(), DecodeError>

where B: Buf, Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited<B>(&mut self, buf: B) -> Result<(), DecodeError>

where B: Buf, Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for BindingExplanation

fn eq(&self, other: &BindingExplanation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for BindingExplanation