public final class Condition extends GeneratedMessageV3 implements ConditionOrBuilder
A condition necessary for an `AccessLevel` to be granted. The Condition is an AND over its fields. So a Condition is true if: 1) the request IP is from one of the listed subnetworks AND 2) the originating device complies with the listed device policy AND 3) all listed access levels are granted AND 4) the request was sent at a time allowed by the DateTimeRestriction.Protobuf type
google.identity.accesscontextmanager.v1.Condition| Modifier and Type | Class and Description |
|---|---|
static class |
Condition.Builder
A condition necessary for an `AccessLevel` to be granted.
|
GeneratedMessageV3.BuilderParent, GeneratedMessageV3.ExtendableBuilder<MessageType extends GeneratedMessageV3.ExtendableMessage,BuilderType extends GeneratedMessageV3.ExtendableBuilder<MessageType,BuilderType>>, GeneratedMessageV3.ExtendableMessage<MessageType extends GeneratedMessageV3.ExtendableMessage>, GeneratedMessageV3.ExtendableMessageOrBuilder<MessageType extends GeneratedMessageV3.ExtendableMessage>, GeneratedMessageV3.FieldAccessorTable, GeneratedMessageV3.UnusedPrivateParameterAbstractMessageLite.InternalOneOfEnum| Modifier and Type | Field and Description |
|---|---|
static int |
DEVICE_POLICY_FIELD_NUMBER |
static int |
IP_SUBNETWORKS_FIELD_NUMBER |
static int |
MEMBERS_FIELD_NUMBER |
static int |
NEGATE_FIELD_NUMBER |
static int |
REGIONS_FIELD_NUMBER |
static int |
REQUIRED_ACCESS_LEVELS_FIELD_NUMBER |
alwaysUseFieldBuilders, unknownFieldsmemoizedSizememoizedHashCode| Modifier and Type | Method and Description |
|---|---|
boolean |
equals(Object obj) |
static Condition |
getDefaultInstance() |
Condition |
getDefaultInstanceForType() |
static Descriptors.Descriptor |
getDescriptor() |
DevicePolicy |
getDevicePolicy()
Device specific restrictions, all restrictions must hold for the
Condition to be true.
|
DevicePolicyOrBuilder |
getDevicePolicyOrBuilder()
Device specific restrictions, all restrictions must hold for the
Condition to be true.
|
String |
getIpSubnetworks(int index)
CIDR block IP subnetwork specification.
|
ByteString |
getIpSubnetworksBytes(int index)
CIDR block IP subnetwork specification.
|
int |
getIpSubnetworksCount()
CIDR block IP subnetwork specification.
|
ProtocolStringList |
getIpSubnetworksList()
CIDR block IP subnetwork specification.
|
String |
getMembers(int index)
The request must be made by one of the provided user or service
accounts.
|
ByteString |
getMembersBytes(int index)
The request must be made by one of the provided user or service
accounts.
|
int |
getMembersCount()
The request must be made by one of the provided user or service
accounts.
|
ProtocolStringList |
getMembersList()
The request must be made by one of the provided user or service
accounts.
|
boolean |
getNegate()
Whether to negate the Condition.
|
Parser<Condition> |
getParserForType() |
String |
getRegions(int index)
The request must originate from one of the provided countries/regions.
|
ByteString |
getRegionsBytes(int index)
The request must originate from one of the provided countries/regions.
|
int |
getRegionsCount()
The request must originate from one of the provided countries/regions.
|
ProtocolStringList |
getRegionsList()
The request must originate from one of the provided countries/regions.
|
String |
getRequiredAccessLevels(int index)
A list of other access levels defined in the same `Policy`, referenced by
resource name.
|
ByteString |
getRequiredAccessLevelsBytes(int index)
A list of other access levels defined in the same `Policy`, referenced by
resource name.
|
int |
getRequiredAccessLevelsCount()
A list of other access levels defined in the same `Policy`, referenced by
resource name.
|
ProtocolStringList |
getRequiredAccessLevelsList()
A list of other access levels defined in the same `Policy`, referenced by
resource name.
|
int |
getSerializedSize() |
UnknownFieldSet |
getUnknownFields() |
boolean |
hasDevicePolicy()
Device specific restrictions, all restrictions must hold for the
Condition to be true.
|
int |
hashCode() |
protected GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
static Condition.Builder |
newBuilder() |
static Condition.Builder |
newBuilder(Condition prototype) |
Condition.Builder |
newBuilderForType() |
protected Condition.Builder |
newBuilderForType(GeneratedMessageV3.BuilderParent parent) |
protected Object |
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused) |
static Condition |
parseDelimitedFrom(InputStream input) |
static Condition |
parseDelimitedFrom(InputStream input,
ExtensionRegistryLite extensionRegistry) |
static Condition |
parseFrom(byte[] data) |
static Condition |
parseFrom(byte[] data,
ExtensionRegistryLite extensionRegistry) |
static Condition |
parseFrom(ByteBuffer data) |
static Condition |
parseFrom(ByteBuffer data,
ExtensionRegistryLite extensionRegistry) |
static Condition |
parseFrom(ByteString data) |
static Condition |
parseFrom(ByteString data,
ExtensionRegistryLite extensionRegistry) |
static Condition |
parseFrom(CodedInputStream input) |
static Condition |
parseFrom(CodedInputStream input,
ExtensionRegistryLite extensionRegistry) |
static Condition |
parseFrom(InputStream input) |
static Condition |
parseFrom(InputStream input,
ExtensionRegistryLite extensionRegistry) |
static Parser<Condition> |
parser() |
Condition.Builder |
toBuilder() |
void |
writeTo(CodedOutputStream output) |
canUseUnsafe, computeStringSize, computeStringSizeNoTag, emptyBooleanList, emptyDoubleList, emptyFloatList, emptyIntList, emptyLongList, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof, internalGetMapField, makeExtensionsImmutable, mergeFromAndMakeImmutableInternal, mutableCopy, mutableCopy, mutableCopy, mutableCopy, mutableCopy, newBooleanList, newBuilderForType, newDoubleList, newFloatList, newIntList, newLongList, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTagfindInitializationErrors, getInitializationErrorString, hashBoolean, hashEnum, hashEnumList, hashFields, hashLong, toStringaddAll, addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeToclone, finalize, getClass, notify, notifyAll, wait, wait, waitfindInitializationErrors, getAllFields, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneoftoByteArray, toByteString, writeDelimitedTo, writeTopublic static final int IP_SUBNETWORKS_FIELD_NUMBER
public static final int DEVICE_POLICY_FIELD_NUMBER
public static final int REQUIRED_ACCESS_LEVELS_FIELD_NUMBER
public static final int NEGATE_FIELD_NUMBER
public static final int MEMBERS_FIELD_NUMBER
public static final int REGIONS_FIELD_NUMBER
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
newInstance in class GeneratedMessageV3public final UnknownFieldSet getUnknownFields()
getUnknownFields in interface MessageOrBuildergetUnknownFields in class GeneratedMessageV3public static final Descriptors.Descriptor getDescriptor()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class GeneratedMessageV3public ProtocolStringList getIpSubnetworksList()
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
repeated string ip_subnetworks = 1;getIpSubnetworksList in interface ConditionOrBuilderpublic int getIpSubnetworksCount()
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
repeated string ip_subnetworks = 1;getIpSubnetworksCount in interface ConditionOrBuilderpublic String getIpSubnetworks(int index)
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
repeated string ip_subnetworks = 1;getIpSubnetworks in interface ConditionOrBuilderindex - The index of the element to return.public ByteString getIpSubnetworksBytes(int index)
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
repeated string ip_subnetworks = 1;getIpSubnetworksBytes in interface ConditionOrBuilderindex - The index of the value to return.public boolean hasDevicePolicy()
Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed.
.google.identity.accesscontextmanager.v1.DevicePolicy device_policy = 2;hasDevicePolicy in interface ConditionOrBuilderpublic DevicePolicy getDevicePolicy()
Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed.
.google.identity.accesscontextmanager.v1.DevicePolicy device_policy = 2;getDevicePolicy in interface ConditionOrBuilderpublic DevicePolicyOrBuilder getDevicePolicyOrBuilder()
Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed.
.google.identity.accesscontextmanager.v1.DevicePolicy device_policy = 2;getDevicePolicyOrBuilder in interface ConditionOrBuilderpublic ProtocolStringList getRequiredAccessLevelsList()
A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` which does not exist is an error. All access levels listed must be granted for the Condition to be true. Example: "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
repeated string required_access_levels = 3;getRequiredAccessLevelsList in interface ConditionOrBuilderpublic int getRequiredAccessLevelsCount()
A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` which does not exist is an error. All access levels listed must be granted for the Condition to be true. Example: "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
repeated string required_access_levels = 3;getRequiredAccessLevelsCount in interface ConditionOrBuilderpublic String getRequiredAccessLevels(int index)
A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` which does not exist is an error. All access levels listed must be granted for the Condition to be true. Example: "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
repeated string required_access_levels = 3;getRequiredAccessLevels in interface ConditionOrBuilderindex - The index of the element to return.public ByteString getRequiredAccessLevelsBytes(int index)
A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` which does not exist is an error. All access levels listed must be granted for the Condition to be true. Example: "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
repeated string required_access_levels = 3;getRequiredAccessLevelsBytes in interface ConditionOrBuilderindex - The index of the value to return.public boolean getNegate()
Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.
bool negate = 5;getNegate in interface ConditionOrBuilderpublic ProtocolStringList getMembersList()
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
`user:{emailid}`
`serviceAccount:{emailid}`
If not specified, a request may come from any user.
repeated string members = 6;getMembersList in interface ConditionOrBuilderpublic int getMembersCount()
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
`user:{emailid}`
`serviceAccount:{emailid}`
If not specified, a request may come from any user.
repeated string members = 6;getMembersCount in interface ConditionOrBuilderpublic String getMembers(int index)
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
`user:{emailid}`
`serviceAccount:{emailid}`
If not specified, a request may come from any user.
repeated string members = 6;getMembers in interface ConditionOrBuilderindex - The index of the element to return.public ByteString getMembersBytes(int index)
The request must be made by one of the provided user or service
accounts. Groups are not supported.
Syntax:
`user:{emailid}`
`serviceAccount:{emailid}`
If not specified, a request may come from any user.
repeated string members = 6;getMembersBytes in interface ConditionOrBuilderindex - The index of the value to return.public ProtocolStringList getRegionsList()
The request must originate from one of the provided countries/regions. Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;getRegionsList in interface ConditionOrBuilderpublic int getRegionsCount()
The request must originate from one of the provided countries/regions. Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;getRegionsCount in interface ConditionOrBuilderpublic String getRegions(int index)
The request must originate from one of the provided countries/regions. Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;getRegions in interface ConditionOrBuilderindex - The index of the element to return.public ByteString getRegionsBytes(int index)
The request must originate from one of the provided countries/regions. Must be valid ISO 3166-1 alpha-2 codes.
repeated string regions = 7;getRegionsBytes in interface ConditionOrBuilderindex - The index of the value to return.public final boolean isInitialized()
isInitialized in interface MessageLiteOrBuilderisInitialized in class GeneratedMessageV3public void writeTo(CodedOutputStream output) throws IOException
writeTo in interface MessageLitewriteTo in class GeneratedMessageV3IOExceptionpublic int getSerializedSize()
getSerializedSize in interface MessageLitegetSerializedSize in class GeneratedMessageV3public boolean equals(Object obj)
equals in interface Messageequals in class AbstractMessagepublic int hashCode()
hashCode in interface MessagehashCode in class AbstractMessagepublic static Condition parseFrom(ByteBuffer data) throws InvalidProtocolBufferException
InvalidProtocolBufferExceptionpublic static Condition parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry) throws InvalidProtocolBufferException
InvalidProtocolBufferExceptionpublic static Condition parseFrom(ByteString data) throws InvalidProtocolBufferException
InvalidProtocolBufferExceptionpublic static Condition parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry) throws InvalidProtocolBufferException
InvalidProtocolBufferExceptionpublic static Condition parseFrom(byte[] data) throws InvalidProtocolBufferException
InvalidProtocolBufferExceptionpublic static Condition parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry) throws InvalidProtocolBufferException
InvalidProtocolBufferExceptionpublic static Condition parseFrom(InputStream input) throws IOException
IOExceptionpublic static Condition parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic static Condition parseDelimitedFrom(InputStream input) throws IOException
IOExceptionpublic static Condition parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic static Condition parseFrom(CodedInputStream input) throws IOException
IOExceptionpublic static Condition parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic Condition.Builder newBuilderForType()
newBuilderForType in interface MessagenewBuilderForType in interface MessageLitepublic static Condition.Builder newBuilder()
public static Condition.Builder newBuilder(Condition prototype)
public Condition.Builder toBuilder()
toBuilder in interface MessagetoBuilder in interface MessageLiteprotected Condition.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
newBuilderForType in class GeneratedMessageV3public static Condition getDefaultInstance()
public Parser<Condition> getParserForType()
getParserForType in interface MessagegetParserForType in interface MessageLitegetParserForType in class GeneratedMessageV3public Condition getDefaultInstanceForType()
getDefaultInstanceForType in interface MessageLiteOrBuildergetDefaultInstanceForType in interface MessageOrBuilderCopyright © 2021 Google LLC. All rights reserved.