type Handle struct {// contains filtered or unexported fields}

funcInternalNewHandle¶

func InternalNewHandle(conngrpc.ClientConnInterface, resourcestring) *Handle

InternalNewHandle is for use by the Google Cloud Libraries only.

InternalNewHandle returns a Handle for resource.The conn parameter refers to a server that must support the IAMPolicy service.

funcInternalNewHandleClient¶

func InternalNewHandleClient(c client, resourcestring) *Handle

InternalNewHandleClient is for use by the Google Cloud Libraries only.

InternalNewHandleClient returns a Handle for resource using the givenclient implementation.

funcInternalNewHandleGRPCClient¶

func InternalNewHandleGRPCClient(cpb.IAMPolicyClient, resourcestring) *Handle

InternalNewHandleGRPCClient is for use by the Google Cloud Libraries only.

InternalNewHandleClient returns a Handle for resource using the givengrpc service that implements IAM as a mixin

func (*Handle)Policy¶

func (h *Handle) Policy(ctxcontext.Context) (*Policy,error)

Policy retrieves the IAM policy for the resource.

func (*Handle)SetPolicy¶

func (h *Handle) SetPolicy(ctxcontext.Context, policy *Policy)error

SetPolicy replaces the resource's current policy with the supplied Policy.

If policy was created from a prior call to Get, then the modification willonly succeed if the policy has not changed since the Get.

func (*Handle)TestPermissions¶

func (h *Handle) TestPermissions(ctxcontext.Context, permissions []string) ([]string,error)

TestPermissions returns the subset of permissions that the caller has on the resource.

func (*Handle)V3¶

func (h *Handle) V3() *Handle3

V3 returns a Handle3, which is like Handle except it setsrequestedPolicyVersion to 3 when retrieving a policy and policy.version to 3when storing a policy.

type Handle3 struct {// contains filtered or unexported fields}

func (*Handle3)Policy¶

func (h *Handle3) Policy(ctxcontext.Context) (*Policy3,error)

Policy retrieves the IAM policy for the resource.

requestedPolicyVersion is always set to 3.

func (*Handle3)SetPolicy¶

func (h *Handle3) SetPolicy(ctxcontext.Context, policy *Policy3)error

SetPolicy replaces the resource's current policy with the supplied Policy.

If policy was created from a prior call to Get, then the modification willonly succeed if the policy has not changed since the Get.

func (*Handle3)TestPermissions¶

func (h *Handle3) TestPermissions(ctxcontext.Context, permissions []string) ([]string,error)

TestPermissions returns the subset of permissions that the caller has on the resource.

type Policy struct {// This field is exported for use by the Google Cloud Libraries only.// It may become unexported in a future release.InternalProto *pb.Policy}

func (*Policy)Add¶

func (p *Policy) Add(memberstring, rRoleName)

Add adds member member to role r if it is not already present.A new binding is created if there is no binding for the role.

func (*Policy)HasRole¶

func (p *Policy) HasRole(memberstring, rRoleName)bool

HasRole reports whether member has role r.

func (*Policy)Members¶

func (p *Policy) Members(rRoleName) []string

Members returns the list of members with the supplied role.The return value should not be modified. Use Add and Removeto modify the members of a role.

func (*Policy)Remove¶

func (p *Policy) Remove(memberstring, rRoleName)

Remove removes member from role r if it is present.

func (*Policy)Roles¶

func (p *Policy) Roles() []RoleName

Roles returns the names of all the roles that appear in the Policy.

type Policy3 struct {Bindings []*pb.Binding// contains filtered or unexported fields}

type RoleNamestring

const (OwnerRoleName = "roles/owner"EditorRoleName = "roles/editor"ViewerRoleName = "roles/viewer")

Common role names.