Viewing file:  Binding.php (14.83 KB) -rw-r--r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
# Generated by the protocol buffer compiler. DO NOT EDIT!
# source: google/iam/v1/policy.proto
namespace Google\Cloud\Iam\V1;
use Google\Protobuf\Internal\GPBType;
use Google\Protobuf\Internal\RepeatedField;
use Google\Protobuf\Internal\GPBUtil;
/**
* Associates `members`, or principals, with a `role`.
*
* Generated from protobuf message <code>google.iam.v1.Binding</code>
*/
class Binding extends \Google\Protobuf\Internal\Message
{
/**
* Role that is assigned to the list of `members`, or principals.
* For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
*
* Generated from protobuf field <code>string role = 1;</code>
*/
protected $role = '';
/**
* Specifies the principals requesting access for a Google Cloud resource.
* `members` can have the following values:
* * `allUsers`: A special identifier that represents anyone who is
* on the internet; with or without a Google account.
* * `allAuthenticatedUsers`: A special identifier that represents anyone
* who is authenticated with a Google account or a service account.
* * `user:{emailid}`: An email address that represents a specific Google
* account. For example, `alice@example.com` .
* * `serviceAccount:{emailid}`: An email address that represents a service
* account. For example, `my-other-app@appspot.gserviceaccount.com`.
* * `group:{emailid}`: An email address that represents a Google group.
* For example, `admins@example.com`.
* * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a user that has been recently deleted. For
* example, `alice@example.com?uid=123456789012345678901`. If the user is
* recovered, this value reverts to `user:{emailid}` and the recovered user
* retains the role in the binding.
* * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
* unique identifier) representing a service account that has been recently
* deleted. For example,
* `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
* If the service account is undeleted, this value reverts to
* `serviceAccount:{emailid}` and the undeleted service account retains the
* role in the binding.
* * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a Google group that has been recently
* deleted. For example, `admins@example.com?uid=123456789012345678901`. If
* the group is recovered, this value reverts to `group:{emailid}` and the
* recovered group retains the role in the binding.
* * `domain:{domain}`: The G Suite domain (primary) that represents all the
* users of that domain. For example, `google.com` or `example.com`.
*
* Generated from protobuf field <code>repeated string members = 2;</code>
*/
private $members;
/**
* The condition that is associated with this binding.
* If the condition evaluates to `true`, then this binding applies to the
* current request.
* If the condition evaluates to `false`, then this binding does not apply to
* the current request. However, a different role binding might grant the same
* role to one or more of the principals in this binding.
* To learn which resources support conditions in their IAM policies, see the
* [IAM
* documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
*
* Generated from protobuf field <code>.google.type.Expr condition = 3;</code>
*/
protected $condition = null;
/**
* Constructor.
*
* @param array $data {
* Optional. Data for populating the Message object.
*
* @type string $role
* Role that is assigned to the list of `members`, or principals.
* For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
* @type array<string>|\Google\Protobuf\Internal\RepeatedField $members
* Specifies the principals requesting access for a Google Cloud resource.
* `members` can have the following values:
* * `allUsers`: A special identifier that represents anyone who is
* on the internet; with or without a Google account.
* * `allAuthenticatedUsers`: A special identifier that represents anyone
* who is authenticated with a Google account or a service account.
* * `user:{emailid}`: An email address that represents a specific Google
* account. For example, `alice@example.com` .
* * `serviceAccount:{emailid}`: An email address that represents a service
* account. For example, `my-other-app@appspot.gserviceaccount.com`.
* * `group:{emailid}`: An email address that represents a Google group.
* For example, `admins@example.com`.
* * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a user that has been recently deleted. For
* example, `alice@example.com?uid=123456789012345678901`. If the user is
* recovered, this value reverts to `user:{emailid}` and the recovered user
* retains the role in the binding.
* * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
* unique identifier) representing a service account that has been recently
* deleted. For example,
* `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
* If the service account is undeleted, this value reverts to
* `serviceAccount:{emailid}` and the undeleted service account retains the
* role in the binding.
* * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a Google group that has been recently
* deleted. For example, `admins@example.com?uid=123456789012345678901`. If
* the group is recovered, this value reverts to `group:{emailid}` and the
* recovered group retains the role in the binding.
* * `domain:{domain}`: The G Suite domain (primary) that represents all the
* users of that domain. For example, `google.com` or `example.com`.
* @type \Google\Type\Expr $condition
* The condition that is associated with this binding.
* If the condition evaluates to `true`, then this binding applies to the
* current request.
* If the condition evaluates to `false`, then this binding does not apply to
* the current request. However, a different role binding might grant the same
* role to one or more of the principals in this binding.
* To learn which resources support conditions in their IAM policies, see the
* [IAM
* documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
* }
*/
public function __construct($data = NULL) {
\GPBMetadata\Google\Iam\V1\Policy::initOnce();
parent::__construct($data);
}
/**
* Role that is assigned to the list of `members`, or principals.
* For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
*
* Generated from protobuf field <code>string role = 1;</code>
* @return string
*/
public function getRole()
{
return $this->role;
}
/**
* Role that is assigned to the list of `members`, or principals.
* For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
*
* Generated from protobuf field <code>string role = 1;</code>
* @param string $var
* @return $this
*/
public function setRole($var)
{
GPBUtil::checkString($var, True);
$this->role = $var;
return $this;
}
/**
* Specifies the principals requesting access for a Google Cloud resource.
* `members` can have the following values:
* * `allUsers`: A special identifier that represents anyone who is
* on the internet; with or without a Google account.
* * `allAuthenticatedUsers`: A special identifier that represents anyone
* who is authenticated with a Google account or a service account.
* * `user:{emailid}`: An email address that represents a specific Google
* account. For example, `alice@example.com` .
* * `serviceAccount:{emailid}`: An email address that represents a service
* account. For example, `my-other-app@appspot.gserviceaccount.com`.
* * `group:{emailid}`: An email address that represents a Google group.
* For example, `admins@example.com`.
* * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a user that has been recently deleted. For
* example, `alice@example.com?uid=123456789012345678901`. If the user is
* recovered, this value reverts to `user:{emailid}` and the recovered user
* retains the role in the binding.
* * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
* unique identifier) representing a service account that has been recently
* deleted. For example,
* `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
* If the service account is undeleted, this value reverts to
* `serviceAccount:{emailid}` and the undeleted service account retains the
* role in the binding.
* * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a Google group that has been recently
* deleted. For example, `admins@example.com?uid=123456789012345678901`. If
* the group is recovered, this value reverts to `group:{emailid}` and the
* recovered group retains the role in the binding.
* * `domain:{domain}`: The G Suite domain (primary) that represents all the
* users of that domain. For example, `google.com` or `example.com`.
*
* Generated from protobuf field <code>repeated string members = 2;</code>
* @return \Google\Protobuf\Internal\RepeatedField
*/
public function getMembers()
{
return $this->members;
}
/**
* Specifies the principals requesting access for a Google Cloud resource.
* `members` can have the following values:
* * `allUsers`: A special identifier that represents anyone who is
* on the internet; with or without a Google account.
* * `allAuthenticatedUsers`: A special identifier that represents anyone
* who is authenticated with a Google account or a service account.
* * `user:{emailid}`: An email address that represents a specific Google
* account. For example, `alice@example.com` .
* * `serviceAccount:{emailid}`: An email address that represents a service
* account. For example, `my-other-app@appspot.gserviceaccount.com`.
* * `group:{emailid}`: An email address that represents a Google group.
* For example, `admins@example.com`.
* * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a user that has been recently deleted. For
* example, `alice@example.com?uid=123456789012345678901`. If the user is
* recovered, this value reverts to `user:{emailid}` and the recovered user
* retains the role in the binding.
* * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
* unique identifier) representing a service account that has been recently
* deleted. For example,
* `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
* If the service account is undeleted, this value reverts to
* `serviceAccount:{emailid}` and the undeleted service account retains the
* role in the binding.
* * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a Google group that has been recently
* deleted. For example, `admins@example.com?uid=123456789012345678901`. If
* the group is recovered, this value reverts to `group:{emailid}` and the
* recovered group retains the role in the binding.
* * `domain:{domain}`: The G Suite domain (primary) that represents all the
* users of that domain. For example, `google.com` or `example.com`.
*
* Generated from protobuf field <code>repeated string members = 2;</code>
* @param array<string>|\Google\Protobuf\Internal\RepeatedField $var
* @return $this
*/
public function setMembers($var)
{
$arr = GPBUtil::checkRepeatedField($var, \Google\Protobuf\Internal\GPBType::STRING);
$this->members = $arr;
return $this;
}
/**
* The condition that is associated with this binding.
* If the condition evaluates to `true`, then this binding applies to the
* current request.
* If the condition evaluates to `false`, then this binding does not apply to
* the current request. However, a different role binding might grant the same
* role to one or more of the principals in this binding.
* To learn which resources support conditions in their IAM policies, see the
* [IAM
* documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
*
* Generated from protobuf field <code>.google.type.Expr condition = 3;</code>
* @return \Google\Type\Expr|null
*/
public function getCondition()
{
return $this->condition;
}
public function hasCondition()
{
return isset($this->condition);
}
public function clearCondition()
{
unset($this->condition);
}
/**
* The condition that is associated with this binding.
* If the condition evaluates to `true`, then this binding applies to the
* current request.
* If the condition evaluates to `false`, then this binding does not apply to
* the current request. However, a different role binding might grant the same
* role to one or more of the principals in this binding.
* To learn which resources support conditions in their IAM policies, see the
* [IAM
* documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
*
* Generated from protobuf field <code>.google.type.Expr condition = 3;</code>
* @param \Google\Type\Expr $var
* @return $this
*/
public function setCondition($var)
{
GPBUtil::checkMessage($var, \Google\Type\Expr::class);
$this->condition = $var;
return $this;
}
}
|