package cerbos.policy.v1

Get desktop application:
View/edit binary Protocol Buffers messages

Used in: PrincipalRule.Action, ResourceRule, RoleDef, RoleRule

• oneof condition

  • Match match = 1

  • string script = 2

Used in: DerivedRoles, PrincipalPolicy, ResourcePolicy, RolePolicy

• repeated string import = 1

• map<string, google.protobuf.Value> local = 2

Used in: Policy

• string name = 1

• repeated RoleDef definitions = 2

• optional Variables variables = 3

• optional Constants constants = 4

Used in: Policy

• string name = 1

• map<string, google.protobuf.Value> definitions = 2

Used in: Policy

• string name = 1

• map<string, string> definitions = 2

• KIND_UNSPECIFIED = 0

• KIND_DERIVED_ROLES = 1

• KIND_EXPORT_VARIABLES = 2

• KIND_PRINCIPAL = 3

• KIND_RESOURCE = 4

• KIND_ROLE_POLICY = 5

• KIND_EXPORT_CONSTANTS = 6

Used in: Condition, Match.ExprList

• oneof op

  • Match.ExprList all = 1

  • Match.ExprList any = 2

  • Match.ExprList none = 3

  • string expr = 4

Used in: Match

• repeated Match of = 1

Used in: Policy

• string source_file = 1

• map<string, string> annotations = 2

• optional google.protobuf.UInt64Value hash = 3

• string store_identifer = 4

• string store_identifier = 5

• optional SourceAttributes source_attributes = 6

Used in: PrincipalRule.Action, ResourceRule, RoleRule

• string expr = 1

• optional Output.When when = 2

Used in: Output

• string rule_activated = 1

• string condition_not_met = 2

Used in: request.v1.AddOrUpdatePolicyRequest, response.v1.GetPolicyResponse

• string api_version = 1

• bool disabled = 2

• string description = 3

• optional Metadata metadata = 4

• oneof policy_type

  • ResourcePolicy resource_policy = 5

  • PrincipalPolicy principal_policy = 6

  • DerivedRoles derived_roles = 7

  • ExportVariables export_variables = 10

  • RolePolicy role_policy = 11

  • ExportConstants export_constants = 12

• map<string, string> variables = 8

• string json_schema = 9

Used in: Policy

• string principal = 1

• string version = 2

• repeated PrincipalRule rules = 3

• string scope = 4

• optional Variables variables = 5

• ScopePermissions scope_permissions = 6

• optional Constants constants = 7

Used in: PrincipalPolicy

• string resource = 1

• repeated PrincipalRule.Action actions = 2

Used in: PrincipalRule

• string action = 1

• optional Condition condition = 2

• effect.v1.Effect effect = 3

• string name = 4

• optional Output output = 5

Used in: Policy

• string resource = 1

• string version = 2

• repeated string import_derived_roles = 3

• repeated ResourceRule rules = 4

• string scope = 5

• optional Schemas schemas = 6

• optional Variables variables = 7

• ScopePermissions scope_permissions = 8

• optional Constants constants = 9

Used in: ResourcePolicy

• repeated string actions = 1

• repeated string derived_roles = 2

• repeated string roles = 3

• optional Condition condition = 4

• effect.v1.Effect effect = 5

• string name = 6

• optional Output output = 7

Used in: DerivedRoles

• string name = 1

• repeated string parent_roles = 2

• optional Condition condition = 3

Used in: Policy

• oneof policy_type

  • string role = 1

• string version = 6

• repeated string parent_roles = 5

• string scope = 2

• repeated RoleRule rules = 3

• ScopePermissions scope_permissions = 4

  Deprecated: no-op.

• optional Variables variables = 7

• optional Constants constants = 8

Used in: RolePolicy

• string resource = 1

• repeated string allow_actions = 2

• optional Condition condition = 3

• string name = 4

• optional Output output = 5

Used in: ResourcePolicy

• optional Schemas.Schema principal_schema = 1

• optional Schemas.Schema resource_schema = 2

Used in: Schema

• repeated string actions = 1

Used in: Schemas

• string ref = 1

• optional IgnoreWhen ignore_when = 2

Used in: PrincipalPolicy, ResourcePolicy, RolePolicy

• SCOPE_PERMISSIONS_UNSPECIFIED = 0

• SCOPE_PERMISSIONS_OVERRIDE_PARENT = 1

• SCOPE_PERMISSIONS_REQUIRE_PARENTAL_CONSENT_FOR_ALLOWS = 2

Used in: audit.v1.AuditTrail, cloud.epdp.v1.Metadata, Metadata

• map<string, google.protobuf.Value> attributes = 1

• optional Test.TestName name = 1

• string description = 2

• bool skip = 3

• string skip_reason = 4

• optional engine.v1.CheckInput input = 5

• map<string, effect.v1.Effect> expected = 6

• optional TestOptions options = 7

• map<string, Test.OutputEntries> expected_outputs = 8

Used in: Test

• map<string, google.protobuf.Value> entries = 1

Used in: Test

• string test_table_name = 1

• string principal_key = 2

• string resource_key = 3

(message has no fields)

• map<string, engine.v1.AuxData> aux_data = 1

• string json_schema = 2

• map<string, engine.v1.Principal> principals = 1

• string json_schema = 2

• map<string, TestFixtureGroup.Principals> principal_groups = 3

• map<string, engine.v1.Resource> resources = 1

• string json_schema = 2

• map<string, TestFixtureGroup.Resources> resource_groups = 3

(message has no fields)

Used in: TestFixture.Principals, TestSuite

• repeated string principals = 1

Used in: TestFixture.Resources, TestSuite

• repeated string resources = 1

Used in: Test, TestSuite, TestTable

• optional google.protobuf.Timestamp now = 1

• bool lenient_scope_search = 2

• map<string, google.protobuf.Value> globals = 3

• string default_policy_version = 4

• string default_scope = 5

Used in: response.v1.PlaygroundTestResponse.TestResults

• repeated TestResults.Suite suites = 1

• optional TestResults.Summary summary = 2

Used in: Resource

• string name = 1

• optional Details details = 2

Used in: Action

• Result result = 1

• oneof outcome

  • Failure failure = 2

  • string error = 3

  • Success success = 5

  • string skip_reason = 6

• repeated engine.v1.Trace engine_trace = 4

• optional engine.v1.TraceBatch engine_trace_batch = 7

Used in: Details

• effect.v1.Effect expected = 1

• effect.v1.Effect actual = 2

• repeated OutputFailure outputs = 3

Used in: Failure

• string src = 1

• oneof outcome

  • OutputFailure.MismatchedValue mismatched = 2

  • OutputFailure.MissingValue missing = 3

  • OutputFailure.EvaluationError errored = 4

Used in: OutputFailure

• optional google.protobuf.Value expected = 1

• string error = 2

Used in: OutputFailure

• optional google.protobuf.Value expected = 1

• optional google.protobuf.Value actual = 2

Used in: OutputFailure

• optional google.protobuf.Value expected = 1

Used in: Suite, TestCase

• string name = 1

• repeated Resource resources = 2

Used in: Principal

• string name = 1

• repeated Action actions = 2

Used in: Details, Summary, Tally

• RESULT_UNSPECIFIED = 0

• RESULT_SKIPPED = 1

• RESULT_PASSED = 2

• RESULT_FAILED = 3

• RESULT_ERRORED = 4

Used in: Details

• effect.v1.Effect effect = 1

• repeated engine.v1.OutputEntry outputs = 2

Used in: TestResults

• string file = 1

• string name = 2

• repeated Principal principals = 3

• optional Summary summary = 4

• string error = 5

• repeated TestCase test_cases = 6

• string description = 7

• string skip_reason = 8

Used in: TestResults, Suite

• Result overall_result = 1

• uint32 tests_count = 2

• repeated Tally result_counts = 3

Used in: Summary

• Result result = 1

• uint32 count = 2

Used in: Suite

• string name = 1

• repeated Principal principals = 2

• string name = 1

• string description = 2

• bool skip = 3

• string skip_reason = 4

• repeated TestTable tests = 5

• map<string, engine.v1.Principal> principals = 6

• map<string, engine.v1.Resource> resources = 7

• map<string, engine.v1.AuxData> aux_data = 8

• optional TestOptions options = 9

• string json_schema = 10

• map<string, TestFixtureGroup.Principals> principal_groups = 11

• map<string, TestFixtureGroup.Resources> resource_groups = 12

Used in: TestSuite

• string name = 1

• string description = 2

• bool skip = 3

• string skip_reason = 4

• optional TestTable.Input input = 5

• repeated TestTable.Expectation expected = 6

• optional TestOptions options = 7

Used in: TestTable

• string principal = 1

• string resource = 2

• map<string, effect.v1.Effect> actions = 3

• repeated OutputExpectations outputs = 4

• repeated string principals = 5

• repeated string resources = 6

• repeated string principal_groups = 7

• repeated string resource_groups = 8

Used in: TestTable

• repeated string principals = 1

• repeated string resources = 2

• repeated string actions = 3

• string aux_data = 4

• repeated string principal_groups = 5

• repeated string resource_groups = 6

Used in: Expectation

• string action = 1

• repeated engine.v1.OutputEntry expected = 2

Used in: DerivedRoles, PrincipalPolicy, ResourcePolicy, RolePolicy

• repeated string import = 1

• map<string, string> local = 2