Interface EffectivePermissions

All Known Implementing Classes:

EffectivePermissionsJson

public interface EffectivePermissions

The effective (resolved) permissions for a principal within a project and service, as returned by the IAM effective-permissions operation.

This is a read-only response view (spec schema EffectivePermissions).

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static interface	EffectivePermissions.Permission	A single effective-permission entry: the caller may perform any of the EffectivePermissions.Permission.getActions() on the referenced resources (or any except those referenced), optionally gated by a Cedar EffectivePermissions.Permission.getCondition() expression.
static interface	EffectivePermissions.ResourceSelector	An anyOf selector that is either an inclusion set (the listed values) or an exclusion set ({except: [...]}).

Method Summary

Modifier and Type	Method	Description
List<String>	getAccessPolicyIds()
List<EffectivePermissions.Permission>	getPermissions()
String	getPrincipalId()
String	getProjectId()
String	getServiceId()

Method Details

getPrincipalId

String getPrincipalId()

Returns:

the principal the permissions are resolved for

getProjectId

String getProjectId()

Returns:

the project the permissions are resolved within

getServiceId

String getServiceId()

Returns:

the service the permissions are resolved for

getAccessPolicyIds

List<String> getAccessPolicyIds()

Returns:

the identifiers of the access policies that contributed to the effective permissions

getPermissions

List<EffectivePermissions.Permission> getPermissions()

Returns:

the effective permission entries (each describes a set of actions and the resources/metros/ibxs/cages and condition that scope them)