Resource: Rule
A rule defines the deny or allow action of the operation it applies to and the conditions required for the rule to apply. You can set one rule for an entire repository and one rule for each package within.
JSON representation |
---|
{ "name": string, "action": enum ( |
Fields | |
---|---|
name |
The name of the rule, for example: |
action |
The action this rule takes. |
operation |
|
condition |
Optional. A CEL expression for conditions that must be met in order for the rule to apply. If not provided, the rule matches all objects. |
packageId |
The package ID the rule applies to. If empty, this rule applies to all packages inside the repository. |
Action
Defines the action of the rule.
Enums | |
---|---|
ACTION_UNSPECIFIED |
Action not specified. |
ALLOW |
Allow the operation. |
DENY |
Deny the operation. |
Operation
The operation the rule applies to.
Enums | |
---|---|
OPERATION_UNSPECIFIED |
Operation not specified. |
DOWNLOAD |
Download operation. |
Expr
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec.
Example (Comparison):
title: "Summary size limit"
description: "Determines if a summary is less than 100 chars"
expression: "document.summary.size() < 100"
Example (Equality):
title: "Requestor is owner"
description: "Determines if requestor is the document owner"
expression: "document.owner == request.auth.claims.email"
Example (Logic):
title: "Public documents"
description: "Determine whether the document should be publicly visible"
expression: "document.type != 'private' && document.type != 'internal'"
Example (Data Manipulation):
title: "Notification string"
description: "Create a notification string with a timestamp."
expression: "'New message received at ' + string(document.create_time)"
The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
JSON representation |
---|
{ "expression": string, "title": string, "description": string, "location": string } |
Fields | |
---|---|
expression |
Textual representation of an expression in Common Expression Language syntax. |
title |
Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression. |
description |
Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI. |
location |
Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file. |
Methods |
|
---|---|
|
Creates a rule. |
|
Deletes a rule. |
|
Gets a rule. |
|
Lists rules. |
|
Updates a rule. |