com.google.cloud.policysimulator.v1

Class BindingExplanation.Builder

java.lang.Object

com.google.protobuf.AbstractMessageLite.Builder

com.google.protobuf.AbstractMessage.Builder<BuilderT>

com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

com.google.cloud.policysimulator.v1.BindingExplanation.Builder

All Implemented Interfaces:

BindingExplanationOrBuilder, com.google.protobuf.Message.Builder, com.google.protobuf.MessageLite.Builder, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Cloneable

Enclosing class:

BindingExplanation

public static final class BindingExplanation.Builder
extends com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>
implements BindingExplanationOrBuilder

 Details about how a binding in a policy affects a principal's ability to use
 a permission.
 

Protobuf type google.cloud.policysimulator.v1.BindingExplanation

Method Summary

Modifier and Type	Method and Description
BindingExplanation.Builder	addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
BindingExplanation	build()
BindingExplanation	buildPartial()
BindingExplanation.Builder	clear()
BindingExplanation.Builder	clearAccess() Required.
BindingExplanation.Builder	clearCondition() A condition expression that prevents this binding from granting access unless the expression evaluates to `true`.
BindingExplanation.Builder	clearField(com.google.protobuf.Descriptors.FieldDescriptor field)
BindingExplanation.Builder	clearMemberships()
BindingExplanation.Builder	clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)
BindingExplanation.Builder	clearRelevance() The relevance of this binding to the overall determination for the entire policy.
BindingExplanation.Builder	clearRole() The role that this binding grants.
BindingExplanation.Builder	clearRolePermission() Indicates whether the role granted by this binding contains the specified permission.
BindingExplanation.Builder	clearRolePermissionRelevance() The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.
BindingExplanation.Builder	clone()
boolean	containsMemberships(String key) Indicates whether each principal in the binding includes the principal specified in the request, either directly or indirectly.
AccessState	getAccess() Required.
int	getAccessValue() Required.
com.google.type.Expr	getCondition() A condition expression that prevents this binding from granting access unless the expression evaluates to `true`.
com.google.type.Expr.Builder	getConditionBuilder() A condition expression that prevents this binding from granting access unless the expression evaluates to `true`.
com.google.type.ExprOrBuilder	getConditionOrBuilder() A condition expression that prevents this binding from granting access unless the expression evaluates to `true`.
BindingExplanation	getDefaultInstanceForType()
static com.google.protobuf.Descriptors.Descriptor	getDescriptor()
com.google.protobuf.Descriptors.Descriptor	getDescriptorForType()
Map<String,BindingExplanation.AnnotatedMembership>	getMemberships() Deprecated.
int	getMembershipsCount() Indicates whether each principal in the binding includes the principal specified in the request, either directly or indirectly.
Map<String,BindingExplanation.AnnotatedMembership>	getMembershipsMap() Indicates whether each principal in the binding includes the principal specified in the request, either directly or indirectly.
BindingExplanation.AnnotatedMembership	getMembershipsOrDefault(String key, BindingExplanation.AnnotatedMembership defaultValue) Indicates whether each principal in the binding includes the principal specified in the request, either directly or indirectly.
BindingExplanation.AnnotatedMembership	getMembershipsOrThrow(String key) Indicates whether each principal in the binding includes the principal specified in the request, either directly or indirectly.
Map<String,BindingExplanation.AnnotatedMembership>	getMutableMemberships() Deprecated.
HeuristicRelevance	getRelevance() The relevance of this binding to the overall determination for the entire policy.
int	getRelevanceValue() The relevance of this binding to the overall determination for the entire policy.
String	getRole() The role that this binding grants.
com.google.protobuf.ByteString	getRoleBytes() The role that this binding grants.
BindingExplanation.RolePermission	getRolePermission() Indicates whether the role granted by this binding contains the specified permission.
HeuristicRelevance	getRolePermissionRelevance() The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.
int	getRolePermissionRelevanceValue() The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.
int	getRolePermissionValue() Indicates whether the role granted by this binding contains the specified permission.
boolean	hasCondition() A condition expression that prevents this binding from granting access unless the expression evaluates to `true`.
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable	internalGetFieldAccessorTable()
protected com.google.protobuf.MapField	internalGetMapField(int number)
protected com.google.protobuf.MapField	internalGetMutableMapField(int number)
boolean	isInitialized()
BindingExplanation.Builder	mergeCondition(com.google.type.Expr value) A condition expression that prevents this binding from granting access unless the expression evaluates to `true`.
BindingExplanation.Builder	mergeFrom(BindingExplanation other)
BindingExplanation.Builder	mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
BindingExplanation.Builder	mergeFrom(com.google.protobuf.Message other)
BindingExplanation.Builder	mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
BindingExplanation.Builder	putAllMemberships(Map<String,BindingExplanation.AnnotatedMembership> values) Indicates whether each principal in the binding includes the principal specified in the request, either directly or indirectly.
BindingExplanation.Builder	putMemberships(String key, BindingExplanation.AnnotatedMembership value) Indicates whether each principal in the binding includes the principal specified in the request, either directly or indirectly.
BindingExplanation.Builder	removeMemberships(String key) Indicates whether each principal in the binding includes the principal specified in the request, either directly or indirectly.
BindingExplanation.Builder	setAccess(AccessState value) Required.
BindingExplanation.Builder	setAccessValue(int value) Required.
BindingExplanation.Builder	setCondition(com.google.type.Expr.Builder builderForValue) A condition expression that prevents this binding from granting access unless the expression evaluates to `true`.
BindingExplanation.Builder	setCondition(com.google.type.Expr value) A condition expression that prevents this binding from granting access unless the expression evaluates to `true`.
BindingExplanation.Builder	setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
BindingExplanation.Builder	setRelevance(HeuristicRelevance value) The relevance of this binding to the overall determination for the entire policy.
BindingExplanation.Builder	setRelevanceValue(int value) The relevance of this binding to the overall determination for the entire policy.
BindingExplanation.Builder	setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value)
BindingExplanation.Builder	setRole(String value) The role that this binding grants.
BindingExplanation.Builder	setRoleBytes(com.google.protobuf.ByteString value) The role that this binding grants.
BindingExplanation.Builder	setRolePermission(BindingExplanation.RolePermission value) Indicates whether the role granted by this binding contains the specified permission.
BindingExplanation.Builder	setRolePermissionRelevance(HeuristicRelevance value) The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.
BindingExplanation.Builder	setRolePermissionRelevanceValue(int value) The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.
BindingExplanation.Builder	setRolePermissionValue(int value) Indicates whether the role granted by this binding contains the specified permission.
BindingExplanation.Builder	setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)

Methods inherited from class com.google.protobuf.GeneratedMessageV3.Builder

getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, getUnknownFieldSetBuilder, hasField, hasOneof, internalGetMapFieldReflection, internalGetMutableMapFieldReflection, isClean, markClean, mergeUnknownLengthDelimitedField, mergeUnknownVarintField, newBuilderForField, onBuilt, onChanged, parseUnknownField, setUnknownFieldSetBuilder, setUnknownFieldsProto3

Methods inherited from class com.google.protobuf.AbstractMessage.Builder

findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toString

Methods inherited from class com.google.protobuf.AbstractMessageLite.Builder

addAll, addAll, mergeDelimitedFrom, mergeDelimitedFrom, newUninitializedMessageException

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface com.google.protobuf.MessageOrBuilder

findInitializationErrors, getAllFields, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

Methods inherited from interface com.google.protobuf.Message.Builder

mergeDelimitedFrom, mergeDelimitedFrom

Method Detail

getDescriptor

public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

internalGetMapField

protected com.google.protobuf.MapField internalGetMapField(int number)

Overrides:

internalGetMapField in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

internalGetMutableMapField

protected com.google.protobuf.MapField internalGetMutableMapField(int number)

Overrides:

internalGetMutableMapField in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

internalGetFieldAccessorTable

protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()

Specified by:

internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

clear

public BindingExplanation.Builder clear()

Specified by:

clear in interface com.google.protobuf.Message.Builder

Specified by:

clear in interface com.google.protobuf.MessageLite.Builder

Overrides:

clear in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

getDescriptorForType

public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()

Specified by:

getDescriptorForType in interface com.google.protobuf.Message.Builder

Specified by:

getDescriptorForType in interface com.google.protobuf.MessageOrBuilder

Overrides:

getDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

getDefaultInstanceForType

public BindingExplanation getDefaultInstanceForType()

Specified by:

getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder

Specified by:

getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder

build

public BindingExplanation build()

Specified by:

build in interface com.google.protobuf.Message.Builder

Specified by:

build in interface com.google.protobuf.MessageLite.Builder

buildPartial

public BindingExplanation buildPartial()

Specified by:

buildPartial in interface com.google.protobuf.Message.Builder

Specified by:

buildPartial in interface com.google.protobuf.MessageLite.Builder

clone

public BindingExplanation.Builder clone()

Specified by:

clone in interface com.google.protobuf.Message.Builder

Specified by:

clone in interface com.google.protobuf.MessageLite.Builder

Overrides:

clone in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

setField

public BindingExplanation.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field,
                                           Object value)

Specified by:

setField in interface com.google.protobuf.Message.Builder

Overrides:

setField in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

clearField

public BindingExplanation.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field)

Specified by:

clearField in interface com.google.protobuf.Message.Builder

Overrides:

clearField in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

clearOneof

public BindingExplanation.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)

Specified by:

clearOneof in interface com.google.protobuf.Message.Builder

Overrides:

clearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

setRepeatedField

public BindingExplanation.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
                                                   int index,
                                                   Object value)

Specified by:

setRepeatedField in interface com.google.protobuf.Message.Builder

Overrides:

setRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

addRepeatedField

public BindingExplanation.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
                                                   Object value)

Specified by:

addRepeatedField in interface com.google.protobuf.Message.Builder

Overrides:

addRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

mergeFrom

public BindingExplanation.Builder mergeFrom(com.google.protobuf.Message other)

Specified by:

mergeFrom in interface com.google.protobuf.Message.Builder

Overrides:

mergeFrom in class com.google.protobuf.AbstractMessage.Builder<BindingExplanation.Builder>

mergeFrom

public BindingExplanation.Builder mergeFrom(BindingExplanation other)

isInitialized

public final boolean isInitialized()

Specified by:

isInitialized in interface com.google.protobuf.MessageLiteOrBuilder

Overrides:

isInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

mergeFrom

public BindingExplanation.Builder mergeFrom(com.google.protobuf.CodedInputStream input,
                                            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                     throws IOException

Specified by:

mergeFrom in interface com.google.protobuf.Message.Builder

Specified by:

mergeFrom in interface com.google.protobuf.MessageLite.Builder

Overrides:

mergeFrom in class com.google.protobuf.AbstractMessage.Builder<BindingExplanation.Builder>

Throws:

IOException

getAccessValue

public int getAccessValue()

 Required. Indicates whether _this binding_ provides the specified
 permission to the specified principal for the specified resource.

 This field does _not_ indicate whether the principal actually has the
 permission for the resource. There might be another binding that overrides
 this binding. To determine whether the principal actually has the
 permission, use the `access` field in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].
 

.google.cloud.policysimulator.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Specified by:

getAccessValue in interface BindingExplanationOrBuilder

Returns:

The enum numeric value on the wire for access.

setAccessValue

public BindingExplanation.Builder setAccessValue(int value)

 Required. Indicates whether _this binding_ provides the specified
 permission to the specified principal for the specified resource.

 This field does _not_ indicate whether the principal actually has the
 permission for the resource. There might be another binding that overrides
 this binding. To determine whether the principal actually has the
 permission, use the `access` field in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].
 

.google.cloud.policysimulator.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Parameters:

value - The enum numeric value on the wire for access to set.

Returns:

This builder for chaining.

getAccess

public AccessState getAccess()

 Required. Indicates whether _this binding_ provides the specified
 permission to the specified principal for the specified resource.

 This field does _not_ indicate whether the principal actually has the
 permission for the resource. There might be another binding that overrides
 this binding. To determine whether the principal actually has the
 permission, use the `access` field in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].
 

.google.cloud.policysimulator.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Specified by:

getAccess in interface BindingExplanationOrBuilder

Returns:

The access.

setAccess

public BindingExplanation.Builder setAccess(AccessState value)

 Required. Indicates whether _this binding_ provides the specified
 permission to the specified principal for the specified resource.

 This field does _not_ indicate whether the principal actually has the
 permission for the resource. There might be another binding that overrides
 this binding. To determine whether the principal actually has the
 permission, use the `access` field in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].
 

.google.cloud.policysimulator.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Parameters:

value - The access to set.

Returns:

This builder for chaining.

clearAccess

public BindingExplanation.Builder clearAccess()

 Required. Indicates whether _this binding_ provides the specified
 permission to the specified principal for the specified resource.

 This field does _not_ indicate whether the principal actually has the
 permission for the resource. There might be another binding that overrides
 this binding. To determine whether the principal actually has the
 permission, use the `access` field in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].
 

.google.cloud.policysimulator.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Returns:

This builder for chaining.

getRole

public String getRole()

 The role that this binding grants. For example,
 `roles/compute.serviceAgent`.

 For a complete list of predefined IAM roles, as well as the permissions in
 each role, see https://cloud.google.com/iam/help/roles/reference.
 

string role = 2;

Specified by:

getRole in interface BindingExplanationOrBuilder

Returns:

The role.

getRoleBytes

public com.google.protobuf.ByteString getRoleBytes()

 The role that this binding grants. For example,
 `roles/compute.serviceAgent`.

 For a complete list of predefined IAM roles, as well as the permissions in
 each role, see https://cloud.google.com/iam/help/roles/reference.
 

string role = 2;

Specified by:

getRoleBytes in interface BindingExplanationOrBuilder

Returns:

The bytes for role.

setRole

public BindingExplanation.Builder setRole(String value)

 The role that this binding grants. For example,
 `roles/compute.serviceAgent`.

 For a complete list of predefined IAM roles, as well as the permissions in
 each role, see https://cloud.google.com/iam/help/roles/reference.
 

string role = 2;

Parameters:

value - The role to set.

Returns:

This builder for chaining.

clearRole

public BindingExplanation.Builder clearRole()

 The role that this binding grants. For example,
 `roles/compute.serviceAgent`.

 For a complete list of predefined IAM roles, as well as the permissions in
 each role, see https://cloud.google.com/iam/help/roles/reference.
 

string role = 2;

Returns:

This builder for chaining.

setRoleBytes

public BindingExplanation.Builder setRoleBytes(com.google.protobuf.ByteString value)

 The role that this binding grants. For example,
 `roles/compute.serviceAgent`.

 For a complete list of predefined IAM roles, as well as the permissions in
 each role, see https://cloud.google.com/iam/help/roles/reference.
 

string role = 2;

Parameters:

value - The bytes for role to set.

Returns:

This builder for chaining.

getRolePermissionValue

public int getRolePermissionValue()

 Indicates whether the role granted by this binding contains the specified
 permission.
 

.google.cloud.policysimulator.v1.BindingExplanation.RolePermission role_permission = 3;

Specified by:

getRolePermissionValue in interface BindingExplanationOrBuilder

Returns:

The enum numeric value on the wire for rolePermission.

setRolePermissionValue

public BindingExplanation.Builder setRolePermissionValue(int value)

 Indicates whether the role granted by this binding contains the specified
 permission.
 

.google.cloud.policysimulator.v1.BindingExplanation.RolePermission role_permission = 3;

Parameters:

value - The enum numeric value on the wire for rolePermission to set.

Returns:

This builder for chaining.

getRolePermission

public BindingExplanation.RolePermission getRolePermission()

 Indicates whether the role granted by this binding contains the specified
 permission.
 

.google.cloud.policysimulator.v1.BindingExplanation.RolePermission role_permission = 3;

Specified by:

getRolePermission in interface BindingExplanationOrBuilder

Returns:

The rolePermission.

setRolePermission

public BindingExplanation.Builder setRolePermission(BindingExplanation.RolePermission value)

 Indicates whether the role granted by this binding contains the specified
 permission.
 

.google.cloud.policysimulator.v1.BindingExplanation.RolePermission role_permission = 3;

Parameters:

value - The rolePermission to set.

Returns:

This builder for chaining.

clearRolePermission

public BindingExplanation.Builder clearRolePermission()

 Indicates whether the role granted by this binding contains the specified
 permission.
 

.google.cloud.policysimulator.v1.BindingExplanation.RolePermission role_permission = 3;

Returns:

This builder for chaining.

getRolePermissionRelevanceValue

public int getRolePermissionRelevanceValue()

 The relevance of the permission's existence, or nonexistence, in the role
 to the overall determination for the entire policy.
 

.google.cloud.policysimulator.v1.HeuristicRelevance role_permission_relevance = 4;

Specified by:

getRolePermissionRelevanceValue in interface BindingExplanationOrBuilder

Returns:

The enum numeric value on the wire for rolePermissionRelevance.

setRolePermissionRelevanceValue

public BindingExplanation.Builder setRolePermissionRelevanceValue(int value)

 The relevance of the permission's existence, or nonexistence, in the role
 to the overall determination for the entire policy.
 

.google.cloud.policysimulator.v1.HeuristicRelevance role_permission_relevance = 4;

Parameters:

value - The enum numeric value on the wire for rolePermissionRelevance to set.

Returns:

This builder for chaining.

getRolePermissionRelevance

public HeuristicRelevance getRolePermissionRelevance()

 The relevance of the permission's existence, or nonexistence, in the role
 to the overall determination for the entire policy.
 

.google.cloud.policysimulator.v1.HeuristicRelevance role_permission_relevance = 4;

Specified by:

getRolePermissionRelevance in interface BindingExplanationOrBuilder

Returns:

The rolePermissionRelevance.

setRolePermissionRelevance

public BindingExplanation.Builder setRolePermissionRelevance(HeuristicRelevance value)

 The relevance of the permission's existence, or nonexistence, in the role
 to the overall determination for the entire policy.
 

.google.cloud.policysimulator.v1.HeuristicRelevance role_permission_relevance = 4;

Parameters:

value - The rolePermissionRelevance to set.

Returns:

This builder for chaining.

clearRolePermissionRelevance

public BindingExplanation.Builder clearRolePermissionRelevance()

 The relevance of the permission's existence, or nonexistence, in the role
 to the overall determination for the entire policy.
 

.google.cloud.policysimulator.v1.HeuristicRelevance role_permission_relevance = 4;

Returns:

This builder for chaining.

getMembershipsCount

public int getMembershipsCount()

Description copied from interface: BindingExplanationOrBuilder

 Indicates whether each principal in the binding includes the principal
 specified in the request, either directly or indirectly. Each key
 identifies a principal in the binding, and each value indicates whether the
 principal in the binding includes the principal in the request.

 For example, suppose that a binding includes the following principals:

 * `user:alice@example.com`
 * `group:product-eng@example.com`

 The principal in the replayed access tuple is `user:bob@example.com`. This
 user is a principal of the group `group:product-eng@example.com`.

 For the first principal in the binding, the key is
 `user:alice@example.com`, and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.

 For the second principal in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policysimulator.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Specified by:

getMembershipsCount in interface BindingExplanationOrBuilder

containsMemberships

public boolean containsMemberships(String key)

 Indicates whether each principal in the binding includes the principal
 specified in the request, either directly or indirectly. Each key
 identifies a principal in the binding, and each value indicates whether the
 principal in the binding includes the principal in the request.

 For example, suppose that a binding includes the following principals:

 * `user:alice@example.com`
 * `group:product-eng@example.com`

 The principal in the replayed access tuple is `user:bob@example.com`. This
 user is a principal of the group `group:product-eng@example.com`.

 For the first principal in the binding, the key is
 `user:alice@example.com`, and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.

 For the second principal in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policysimulator.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Specified by:

containsMemberships in interface BindingExplanationOrBuilder

getMemberships

@Deprecated
public Map<String,BindingExplanation.AnnotatedMembership> getMemberships()

Deprecated.

Use getMembershipsMap() instead.

Specified by:

getMemberships in interface BindingExplanationOrBuilder

getMembershipsMap

public Map<String,BindingExplanation.AnnotatedMembership> getMembershipsMap()

 Indicates whether each principal in the binding includes the principal
 specified in the request, either directly or indirectly. Each key
 identifies a principal in the binding, and each value indicates whether the
 principal in the binding includes the principal in the request.

 For example, suppose that a binding includes the following principals:

 * `user:alice@example.com`
 * `group:product-eng@example.com`

 The principal in the replayed access tuple is `user:bob@example.com`. This
 user is a principal of the group `group:product-eng@example.com`.

 For the first principal in the binding, the key is
 `user:alice@example.com`, and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.

 For the second principal in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policysimulator.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Specified by:

getMembershipsMap in interface BindingExplanationOrBuilder

getMembershipsOrDefault

public BindingExplanation.AnnotatedMembership getMembershipsOrDefault(String key,
                                                                      BindingExplanation.AnnotatedMembership defaultValue)

 Indicates whether each principal in the binding includes the principal
 specified in the request, either directly or indirectly. Each key
 identifies a principal in the binding, and each value indicates whether the
 principal in the binding includes the principal in the request.

 For example, suppose that a binding includes the following principals:

 * `user:alice@example.com`
 * `group:product-eng@example.com`

 The principal in the replayed access tuple is `user:bob@example.com`. This
 user is a principal of the group `group:product-eng@example.com`.

 For the first principal in the binding, the key is
 `user:alice@example.com`, and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.

 For the second principal in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policysimulator.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Specified by:

getMembershipsOrDefault in interface BindingExplanationOrBuilder

getMembershipsOrThrow

public BindingExplanation.AnnotatedMembership getMembershipsOrThrow(String key)

 Indicates whether each principal in the binding includes the principal
 specified in the request, either directly or indirectly. Each key
 identifies a principal in the binding, and each value indicates whether the
 principal in the binding includes the principal in the request.

 For example, suppose that a binding includes the following principals:

 * `user:alice@example.com`
 * `group:product-eng@example.com`

 The principal in the replayed access tuple is `user:bob@example.com`. This
 user is a principal of the group `group:product-eng@example.com`.

 For the first principal in the binding, the key is
 `user:alice@example.com`, and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.

 For the second principal in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policysimulator.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Specified by:

getMembershipsOrThrow in interface BindingExplanationOrBuilder

clearMemberships

public BindingExplanation.Builder clearMemberships()

removeMemberships

public BindingExplanation.Builder removeMemberships(String key)

 Indicates whether each principal in the binding includes the principal
 specified in the request, either directly or indirectly. Each key
 identifies a principal in the binding, and each value indicates whether the
 principal in the binding includes the principal in the request.

 For example, suppose that a binding includes the following principals:

 * `user:alice@example.com`
 * `group:product-eng@example.com`

 The principal in the replayed access tuple is `user:bob@example.com`. This
 user is a principal of the group `group:product-eng@example.com`.

 For the first principal in the binding, the key is
 `user:alice@example.com`, and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.

 For the second principal in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policysimulator.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

getMutableMemberships

@Deprecated
public Map<String,BindingExplanation.AnnotatedMembership> getMutableMemberships()

Deprecated.

Use alternate mutation accessors instead.

putMemberships

public BindingExplanation.Builder putMemberships(String key,
                                                 BindingExplanation.AnnotatedMembership value)

 Indicates whether each principal in the binding includes the principal
 specified in the request, either directly or indirectly. Each key
 identifies a principal in the binding, and each value indicates whether the
 principal in the binding includes the principal in the request.

 For example, suppose that a binding includes the following principals:

 * `user:alice@example.com`
 * `group:product-eng@example.com`

 The principal in the replayed access tuple is `user:bob@example.com`. This
 user is a principal of the group `group:product-eng@example.com`.

 For the first principal in the binding, the key is
 `user:alice@example.com`, and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.

 For the second principal in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policysimulator.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

putAllMemberships

public BindingExplanation.Builder putAllMemberships(Map<String,BindingExplanation.AnnotatedMembership> values)

 Indicates whether each principal in the binding includes the principal
 specified in the request, either directly or indirectly. Each key
 identifies a principal in the binding, and each value indicates whether the
 principal in the binding includes the principal in the request.

 For example, suppose that a binding includes the following principals:

 * `user:alice@example.com`
 * `group:product-eng@example.com`

 The principal in the replayed access tuple is `user:bob@example.com`. This
 user is a principal of the group `group:product-eng@example.com`.

 For the first principal in the binding, the key is
 `user:alice@example.com`, and the `membership` field in the value is set to
 `MEMBERSHIP_NOT_INCLUDED`.

 For the second principal in the binding, the key is
 `group:product-eng@example.com`, and the `membership` field in the value is
 set to `MEMBERSHIP_INCLUDED`.
 

map<string, .google.cloud.policysimulator.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

getRelevanceValue

public int getRelevanceValue()

 The relevance of this binding to the overall determination for the entire
 policy.
 

.google.cloud.policysimulator.v1.HeuristicRelevance relevance = 6;

Specified by:

getRelevanceValue in interface BindingExplanationOrBuilder

Returns:

The enum numeric value on the wire for relevance.

setRelevanceValue

public BindingExplanation.Builder setRelevanceValue(int value)

 The relevance of this binding to the overall determination for the entire
 policy.
 

.google.cloud.policysimulator.v1.HeuristicRelevance relevance = 6;

Parameters:

value - The enum numeric value on the wire for relevance to set.

Returns:

This builder for chaining.

getRelevance

public HeuristicRelevance getRelevance()

 The relevance of this binding to the overall determination for the entire
 policy.
 

.google.cloud.policysimulator.v1.HeuristicRelevance relevance = 6;

Specified by:

getRelevance in interface BindingExplanationOrBuilder

Returns:

The relevance.

setRelevance

public BindingExplanation.Builder setRelevance(HeuristicRelevance value)

 The relevance of this binding to the overall determination for the entire
 policy.
 

.google.cloud.policysimulator.v1.HeuristicRelevance relevance = 6;

Parameters:

value - The relevance to set.

Returns:

This builder for chaining.

clearRelevance

public BindingExplanation.Builder clearRelevance()

 The relevance of this binding to the overall determination for the entire
 policy.
 

.google.cloud.policysimulator.v1.HeuristicRelevance relevance = 6;

Returns:

This builder for chaining.

hasCondition

public boolean hasCondition()

 A condition expression that prevents this binding from granting access
 unless the expression evaluates to `true`.

 To learn about IAM Conditions, see
 https://cloud.google.com/iam/docs/conditions-overview.
 

.google.type.Expr condition = 7;

Specified by:

hasCondition in interface BindingExplanationOrBuilder

Returns:

Whether the condition field is set.

getCondition

public com.google.type.Expr getCondition()

 A condition expression that prevents this binding from granting access
 unless the expression evaluates to `true`.

 To learn about IAM Conditions, see
 https://cloud.google.com/iam/docs/conditions-overview.
 

.google.type.Expr condition = 7;

Specified by:

getCondition in interface BindingExplanationOrBuilder

Returns:

The condition.

setCondition

public BindingExplanation.Builder setCondition(com.google.type.Expr value)

 A condition expression that prevents this binding from granting access
 unless the expression evaluates to `true`.

 To learn about IAM Conditions, see
 https://cloud.google.com/iam/docs/conditions-overview.
 

.google.type.Expr condition = 7;

setCondition

public BindingExplanation.Builder setCondition(com.google.type.Expr.Builder builderForValue)

 A condition expression that prevents this binding from granting access
 unless the expression evaluates to `true`.

 To learn about IAM Conditions, see
 https://cloud.google.com/iam/docs/conditions-overview.
 

.google.type.Expr condition = 7;

mergeCondition

public BindingExplanation.Builder mergeCondition(com.google.type.Expr value)

 A condition expression that prevents this binding from granting access
 unless the expression evaluates to `true`.

 To learn about IAM Conditions, see
 https://cloud.google.com/iam/docs/conditions-overview.
 

.google.type.Expr condition = 7;

clearCondition

public BindingExplanation.Builder clearCondition()

 A condition expression that prevents this binding from granting access
 unless the expression evaluates to `true`.

 To learn about IAM Conditions, see
 https://cloud.google.com/iam/docs/conditions-overview.
 

.google.type.Expr condition = 7;

getConditionBuilder

public com.google.type.Expr.Builder getConditionBuilder()

 A condition expression that prevents this binding from granting access
 unless the expression evaluates to `true`.

 To learn about IAM Conditions, see
 https://cloud.google.com/iam/docs/conditions-overview.
 

.google.type.Expr condition = 7;

getConditionOrBuilder

public com.google.type.ExprOrBuilder getConditionOrBuilder()

 A condition expression that prevents this binding from granting access
 unless the expression evaluates to `true`.

 To learn about IAM Conditions, see
 https://cloud.google.com/iam/docs/conditions-overview.
 

.google.type.Expr condition = 7;

Specified by:

getConditionOrBuilder in interface BindingExplanationOrBuilder

setUnknownFields

public final BindingExplanation.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)

Specified by:

setUnknownFields in interface com.google.protobuf.Message.Builder

Overrides:

setUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>

mergeUnknownFields

public final BindingExplanation.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)

Specified by:

mergeUnknownFields in interface com.google.protobuf.Message.Builder

Overrides:

mergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<BindingExplanation.Builder>