acl

type Action int32

type BearerToken struct {

	// Bearer Token body
	Body *BearerToken_Body `protobuf:"bytes,1,opt,name=body" json:"body,omitempty"`
	// Signature of BearerToken body
	Signature *grpc.Signature `protobuf:"bytes,2,opt,name=signature" json:"signature,omitempty"`
	// contains filtered or unexported fields
}

type BearerToken_Body struct {

	// Table of Extended ACL rules to use instead of the ones attached to the
	// container. If it contains `container_id` field, bearer token is only
	// valid for this specific container. Otherwise, any container of the same
	// owner is allowed.
	//
	// Deprecated: eACL tables are no longer relevant - `APEOverrides` should be
	// used instead.
	EaclTable *EACLTable `protobuf:"bytes,1,opt,name=eacl_table,json=eaclTable" json:"eacl_table,omitempty"`
	// `OwnerID` defines to whom the token was issued. It must match the request
	// originator's `OwnerID`. If empty, any token bearer will be accepted.
	OwnerId *grpc.OwnerID `protobuf:"bytes,2,opt,name=owner_id,json=ownerID" json:"owner_id,omitempty"`
	// Token expiration and valid time period parameters
	Lifetime *BearerToken_Body_TokenLifetime `protobuf:"bytes,3,opt,name=lifetime" json:"lifetime,omitempty"`
	// AllowImpersonate flag to consider token signer as request owner.
	// If this field is true extended ACL table in token body isn't processed.
	AllowImpersonate *bool `protobuf:"varint,4,opt,name=allow_impersonate,json=allowImpersonate" json:"allow_impersonate,omitempty"`
	// APE override for the target.
	ApeOverride *BearerToken_Body_APEOverride `protobuf:"bytes,5,opt,name=ape_override,json=apeOverride" json:"ape_override,omitempty"`
	// contains filtered or unexported fields
}

type BearerToken_Body_APEOverride struct {

	// Target for which chains are applied.
	Target *grpc1.ChainTarget `protobuf:"bytes,1,opt,name=target" json:"target,omitempty"`
	// The list of APE chains.
	Chains []*grpc1.Chain `protobuf:"bytes,2,rep,name=chains" json:"chains,omitempty"`
	// contains filtered or unexported fields
}

type BearerToken_Body_APEOverride_builder struct {

	// Target for which chains are applied.
	Target *grpc1.ChainTarget
	// The list of APE chains.
	Chains []*grpc1.Chain
	// contains filtered or unexported fields
}

type BearerToken_Body_TokenLifetime struct {

	// Expiration Epoch
	Exp *uint64 `protobuf:"varint,1,opt,name=exp" json:"exp,omitempty"`
	// Not valid before Epoch
	Nbf *uint64 `protobuf:"varint,2,opt,name=nbf" json:"nbf,omitempty"`
	// Issued at Epoch
	Iat *uint64 `protobuf:"varint,3,opt,name=iat" json:"iat,omitempty"`
	// contains filtered or unexported fields
}

type BearerToken_Body_TokenLifetime_builder struct {

	// Expiration Epoch
	Exp *uint64
	// Not valid before Epoch
	Nbf *uint64
	// Issued at Epoch
	Iat *uint64
	// contains filtered or unexported fields
}

type BearerToken_Body_builder struct {

	// Table of Extended ACL rules to use instead of the ones attached to the
	// container. If it contains `container_id` field, bearer token is only
	// valid for this specific container. Otherwise, any container of the same
	// owner is allowed.
	//
	// Deprecated: eACL tables are no longer relevant - `APEOverrides` should be
	// used instead.
	EaclTable *EACLTable
	// `OwnerID` defines to whom the token was issued. It must match the request
	// originator's `OwnerID`. If empty, any token bearer will be accepted.
	OwnerId *grpc.OwnerID
	// Token expiration and valid time period parameters
	Lifetime *BearerToken_Body_TokenLifetime
	// AllowImpersonate flag to consider token signer as request owner.
	// If this field is true extended ACL table in token body isn't processed.
	AllowImpersonate *bool
	// APE override for the target.
	ApeOverride *BearerToken_Body_APEOverride
	// contains filtered or unexported fields
}

type BearerToken_builder struct {

	// Bearer Token body
	Body *BearerToken_Body
	// Signature of BearerToken body
	Signature *grpc.Signature
	// contains filtered or unexported fields
}

type EACLRecord struct {

	// FrostFS request Verb to match
	Operation *Operation `protobuf:"varint,1,opt,name=operation,enum=frost.fs.acl.Operation" json:"operation,omitempty"`
	// Rule execution result. Either allows or denies access if filters match.
	Action *Action `protobuf:"varint,2,opt,name=action,enum=frost.fs.acl.Action" json:"action,omitempty"`
	// List of filters to match and see if rule is applicable
	Filters []*EACLRecord_Filter `protobuf:"bytes,3,rep,name=filters" json:"filters,omitempty"`
	// List of target subjects to apply ACL rule to
	Targets []*EACLRecord_Target `protobuf:"bytes,4,rep,name=targets" json:"targets,omitempty"`
	// contains filtered or unexported fields
}

type EACLRecord_Filter struct {

	// Define if Object or Request header will be used
	HeaderType *HeaderType `protobuf:"varint,1,opt,name=header_type,json=headerType,enum=frost.fs.acl.HeaderType" json:"header_type,omitempty"`
	// Match operation type
	MatchType *MatchType `protobuf:"varint,2,opt,name=match_type,json=matchType,enum=frost.fs.acl.MatchType" json:"match_type,omitempty"`
	// Name of the Header to use
	Key *string `protobuf:"bytes,3,opt,name=key" json:"key,omitempty"`
	// Expected Header Value or pattern to match
	Value *string `protobuf:"bytes,4,opt,name=value" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type EACLRecord_Filter_builder struct {

	// Define if Object or Request header will be used
	HeaderType *HeaderType
	// Match operation type
	MatchType *MatchType
	// Name of the Header to use
	Key *string
	// Expected Header Value or pattern to match
	Value *string
	// contains filtered or unexported fields
}

type EACLRecord_Target struct {

	// Target subject's role class
	Role *Role `protobuf:"varint,1,opt,name=role,enum=frost.fs.acl.Role" json:"role,omitempty"`
	// List of public keys to identify target subject
	Keys [][]byte `protobuf:"bytes,2,rep,name=keys" json:"keys,omitempty"`
	// contains filtered or unexported fields
}

type EACLRecord_Target_builder struct {

	// Target subject's role class
	Role *Role
	// List of public keys to identify target subject
	Keys [][]byte
	// contains filtered or unexported fields
}

type EACLRecord_builder struct {

	// FrostFS request Verb to match
	Operation *Operation
	// Rule execution result. Either allows or denies access if filters match.
	Action *Action
	// List of filters to match and see if rule is applicable
	Filters []*EACLRecord_Filter
	// List of target subjects to apply ACL rule to
	Targets []*EACLRecord_Target
	// contains filtered or unexported fields
}

type EACLTable struct {

	// eACL format version. Effectively, the version of API library used to create
	// eACL Table.
	Version *grpc.Version `protobuf:"bytes,1,opt,name=version" json:"version,omitempty"`
	// Identifier of the container that should use given access control rules
	ContainerId *grpc.ContainerID `protobuf:"bytes,2,opt,name=container_id,json=containerID" json:"container_id,omitempty"`
	// List of Extended ACL rules
	Records []*EACLRecord `protobuf:"bytes,3,rep,name=records" json:"records,omitempty"`
	// contains filtered or unexported fields
}

type EACLTable_builder struct {

	// eACL format version. Effectively, the version of API library used to create
	// eACL Table.
	Version *grpc.Version
	// Identifier of the container that should use given access control rules
	ContainerId *grpc.ContainerID
	// List of Extended ACL rules
	Records []*EACLRecord
	// contains filtered or unexported fields
}

type HeaderType int32

type MatchType int32

type Operation int32

type Role int32