policytroubleshooter

Documentation

Index

• type Service
  • func NewService(ctx context.Context, iamCheckerClient *pt.IamCheckerClient) (*Service, error)
  • func (s *Service) Close(ctx context.Context) error
  • func (s *Service) HasPermission(ctx context.Context, principal string, fullResourceName string, ...) (has bool, err error)
  • func (s *Service) TroubleshootIamPolicy(ctx context.Context, principal string, fullResourceName string, ...) (resp *ptpb.TroubleshootIamPolicyResponse, err error)

Types

type Service

type Service struct {
	// contains filtered or unexported fields
}

func NewService

func NewService(ctx context.Context, iamCheckerClient *pt.IamCheckerClient) (*Service, error)

func (*Service) Close

func (s *Service) Close(ctx context.Context) error

func (*Service) HasPermission

func (s *Service) HasPermission(ctx context.Context, principal string, fullResourceName string, permission string) (has bool, err error)

HasPermission is fullResourceNameで指定したResourceにprincipalがpermissionを持っているかを返す

principal : Google Account or Service Account Email For example sinmetal@example.com fullResourceName : see https://cloud.google.com/iam/docs/full-resource-names For example //storage.googleapis.com/projects/_/buckets/bucket_id permission : see https://cloud.google.com/iam/docs/understanding-roles For example storage.objects.get

func (*Service) TroubleshootIamPolicy

func (s *Service) TroubleshootIamPolicy(ctx context.Context, principal string, fullResourceName string, permission string) (resp *ptpb.TroubleshootIamPolicyResponse, err error)

TroubleshootIamPolicy is https://cloud.google.com/iam/docs/reference/policytroubleshooter/rest/v1/iam/troubleshoot を呼ぶ