rbacv1

type AllowedMethod struct {

	// The name of the method.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The scope that the method applies to (all users, or current user)
	Scope *Scope `protobuf:"varint,2,opt,name=scope,proto3,enum=rbac.v1.Scope,oneof" json:"scope,omitempty"`
	// contains filtered or unexported fields
}

type Config struct {

	// A list of available roles.
	Roles []*Role `protobuf:"bytes,2,rep,name=roles,proto3" json:"roles,omitempty"`
	// A list of available role bindings.
	RoleBindings []*RoleBinding `protobuf:"bytes,3,rep,name=role_bindings,json=roleBindings,proto3" json:"role_bindings,omitempty"`
	// contains filtered or unexported fields
}

type Role struct {

	// An arbitrary unique identifier for the role.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// The service name to which the role applies. Should be qualified to
	// the full package name of the service, not including '/' separators.
	// For example, `service Foo` in `package bar.baz` should be "bar.baz.Foo".
	Service string `protobuf:"bytes,2,opt,name=service,proto3" json:"service,omitempty"`
	// A list of methods that the role allows access to. The method names must
	// not be qualified with the service name. All methods must exist in the
	// named service. For example, `rpc Bar` in `service Foo` should be "Bar".
	AllowedMethods []*AllowedMethod `protobuf:"bytes,3,rep,name=allowed_methods,json=allowedMethods,proto3" json:"allowed_methods,omitempty"`
	// contains filtered or unexported fields
}

type RoleBinding struct {

	// An arbitrary unique identifier for the role binding.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// An existing role id.
	RoleId string `protobuf:"bytes,2,opt,name=role_id,json=roleId,proto3" json:"role_id,omitempty"`
	// A list of users (usernames/emails) that the role applies to.
	Users []string `protobuf:"bytes,3,rep,name=users,proto3" json:"users,omitempty"`
	// contains filtered or unexported fields
}

type Scope int32

type ScopeOptions struct {

	// Whether scope semantics are enabled for this method.
	Enabled bool `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}