Policy
Mantieni tutto organizzato con le raccolte
Salva e classifica i contenuti in base alle tue preferenze.
Definisce un criterio di controllo dell'accesso alle risorse.
| Rappresentazione JSON |
{
"assignments": [
{
object (Assignment)
}
],
"etag": string
} |
| Campi |
assignments[] |
object (Assignment)
Elenco di assignments
|
etag |
string (bytes format)
L'etag viene utilizzato per il controllo della concorrenza ottimistico come modo per impedire che gli aggiornamenti simultanei di un criterio si sovrascrivano a vicenda. È consigliabile che i sistemi utilizzino l'etag nel ciclo di lettura-modifica-scrittura per eseguire gli aggiornamenti dei criteri al fine di evitare race condition: un'etag viene restituita nella risposta a policies.get e i sistemi devono inserire l'etag nella richiesta a policies.set per garantire che la modifica venga applicata alla stessa versione dei criteri. Se nella chiamata a policies.get non viene fornito alcun ETag, il criterio esistente viene sovrascritto ciecamente. Una stringa con codifica Base64.
|
Assignment
Associa members a un role.
| Rappresentazione JSON |
{
"role": string,
"members": [
string
]
} |
| Campi |
role |
string
Obbligatorio. Ruolo assegnato a members.
|
members[] |
string
Le identità a cui è assegnato il ruolo. Può avere i seguenti valori:
{user_email}: Un indirizzo email che rappresenta un Account Google specifico. Ad esempio: alice@gmail.com.
{group_email}: Un indirizzo email che rappresenta un gruppo Google. Ad esempio, viewers@gmail.com.
|
Salvo quando diversamente specificato, i contenuti di questa pagina sono concessi in base alla licenza Creative Commons Attribution 4.0, mentre gli esempi di codice sono concessi in base alla licenza Apache 2.0. Per ulteriori dettagli, consulta le norme del sito di Google Developers. Java è un marchio registrato di Oracle e/o delle sue consociate.
Ultimo aggiornamento 2025-07-25 UTC.
[null,null,["Ultimo aggiornamento 2025-07-25 UTC."],[[["\u003cp\u003eThis document defines an access control policy for resources, utilizing JSON for representation.\u003c/p\u003e\n"],["\u003cp\u003eThe policy includes assignments which associate members with specific roles.\u003c/p\u003e\n"],["\u003cp\u003eRoles determine the level of access granted to assigned members, which can be individuals or groups.\u003c/p\u003e\n"],["\u003cp\u003eAn \u003ccode\u003eetag\u003c/code\u003e is used for optimistic concurrency control, preventing simultaneous updates from overwriting each other.\u003c/p\u003e\n"]]],["The content defines access control policies for resources using JSON. A policy includes an array of \"assignments\" and an \"etag\" for concurrency control. Assignments link \"members\" to a specified \"role,\" with members being Google account emails or group emails. Systems use the etag in read-modify-write cycles to prevent overwriting. The \"role\" field is a required string, and members represent identities granted the specified role.\n"],null,["# Policy\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n- [Assignment](#Assignment)\n - [JSON representation](#Assignment.SCHEMA_REPRESENTATION)\n\nDefines an access control policy to the resources.\n\n| JSON representation |\n|-------------------------------------------------------------------------------------------------------------------------------|\n| ``` { \"assignments\": [ { object (/spectrum-access-system/reference/rest/v1alpha1/Policy#Assignment) } ], \"etag\": string } ``` |\n\n| Fields ||\n|-----------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `assignments[]` | `object (`[Assignment](/spectrum-access-system/reference/rest/v1alpha1/Policy#Assignment)`)` List of [assignments](/spectrum-access-system/reference/rest/v1alpha1/Policy#Assignment) |\n| `etag` | `string (`[bytes](https://developers.google.com/discovery/v1/type-format)` format)` The etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to [policies.get](/spectrum-access-system/reference/rest/v1alpha1/policies/get#spectrum.sas.portal.v1alpha1.PolicyService.GetPolicy), and systems are expected to put that etag in the request to [policies.set](/spectrum-access-system/reference/rest/v1alpha1/policies/set#spectrum.sas.portal.v1alpha1.PolicyService.SetPolicy) to ensure that their change will be applied to the same version of the policy. If no etag is provided in the call to [policies.get](/spectrum-access-system/reference/rest/v1alpha1/policies/get#spectrum.sas.portal.v1alpha1.PolicyService.GetPolicy), then the existing policy is overwritten blindly. A base64-encoded string. |\n\nAssignment\n----------\n\nAssociates `members` with a `role`.\n\n| JSON representation |\n|---------------------------------------------------|\n| ``` { \"role\": string, \"members\": [ string ] } ``` |\n\n| Fields ||\n|-------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `role` | `string` Required. Role that is assigned to `members`. |\n| `members[]` | `string` The identities the role is assigned to. It can have the following values: - `{user_email}`: An email address that represents a specific Google account. For example: `alice@gmail.com`. - `{group_email}`: An email address that represents a Google group. For example, `viewers@gmail.com`. |"]]
