google-apis-cloudidentity_v1 0.12.0 → 0.16.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 55fde9f9bd1e8efdc34fdcd31000e6ac32d24798bd64433ba746050767ba7ce2
-  data.tar.gz: 135aa6423ad4c2e11b30509254cdce3ae1e693942f46479f1e54e1b82d1ac80b
+  metadata.gz: 43d53b0efc2f564f64df1acb14c5b3977ada795537df4590b6cb03f49690bd15
+  data.tar.gz: 6ce752692586b9bec12700dd1dde3d41861621155b84c8181bda815002d8482e
 SHA512:
-  metadata.gz: 1dcce1a6ba46784b69617cd34bd9fa1e5fc1ed6faa4e6a069b2214b28caec89ea5347763916a40598490878c662d7da2849c63e15a64ee11f15fe7bc22435583
-  data.tar.gz: 2f8862b0237466deedb0f93639d667fc2d3591fd24c5595b29970b878e58cbd752a4697c7ebbfd3d8949d185c33fcf629d9eaf9d8931c6a537513100329886b4
+  metadata.gz: 6f626f5587cca8ccb358691d1fdc0cddf88789f83e33b78fc4a4f5fc278ef857e23f8300cdc6f9f69b1b68b9f180d27d80d05e2c132b9345c978e070259f04e1
+  data.tar.gz: ed190ad8eb9bd920f8003b96010d18699a088d40fef0788a9bac3142cf6b561bb953343ae2d0091dde0b5f39ef527c64f10c5833dc147ff23e2c22560ec43aba

data/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Release history for google-apis-cloudidentity_v1
 
+### v0.16.0 (2021-12-08)
+
+* Regenerated from discovery document revision 20211207
+
+### v0.15.0 (2021-11-17)
+
+* Regenerated from discovery document revision 20211116
+
+### v0.14.0 (2021-10-20)
+
+* Regenerated from discovery document revision 20210928
+
+### v0.13.0 (2021-09-22)
+
+* Regenerated from discovery document revision 20210920
+
 ### v0.12.0 (2021-09-08)
 
 * Regenerated from discovery document revision 20210906

data/OVERVIEW.md

@@ -60,8 +60,8 @@ See the class reference docs for information on the methods you can call from a
 
 More detailed descriptions of the Google simple REST clients are available in two documents.
 
- *  The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/master/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
- *  The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/master/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
+ *  The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
+ *  The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
 
 (Note: the above documents are written for the simple REST clients in general, and their examples may not reflect the Cloudidentity service in particular.)
 

data/lib/google/apis/cloudidentity_v1/classes.rb

@@ -131,7 +131,10 @@ module Google
         # users with at least one `organizations.department` of engineering. `user.
         # organizations.exists(org, org.department=='engineering')` All users with at
         # least one location that has `area` of `foo` and `building_id` of `bar`. `user.
-        # locations.exists(loc, loc.area=='foo' && loc.building_id=='bar')`
+        # locations.exists(loc, loc.area=='foo' && loc.building_id=='bar')` All users
+        # with any variation of the name John Doe (case-insensitive queries add `
+        # equalsIgnoreCase()` to the value being queried). `user.name.value.
+        # equalsIgnoreCase('jOhn DoE')`
         # Corresponds to the JSON property `query`
         # @return [String]
         attr_accessor :query
@@ -1535,6 +1538,39 @@ module Google
         end
       end
       
+      # The definition of MemberRestriction
+      class MemberRestriction
+        include Google::Apis::Core::Hashable
+      
+        # The evaluated state of this restriction.
+        # Corresponds to the JSON property `evaluation`
+        # @return [Google::Apis::CloudidentityV1::RestrictionEvaluation]
+        attr_accessor :evaluation
+      
+        # Member Restriction as defined by CEL expression. Supported restrictions are: `
+        # member.customer_id` and `member.type`. Valid values for `member.type` are `1`,
+        # `2` and `3`. They correspond to USER, SERVICE_ACCOUNT, and GROUP respectively.
+        # The value for `member.customer_id` only supports `groupCustomerId()` currently
+        # which means the customer id of the group will be used for restriction.
+        # Supported operators are `&&`, `||` and `==`, corresponding to AND, OR, and
+        # EQUAL. Examples: Allow only service accounts of given customer to be members. `
+        # member.type == 2 && member.customer_id == groupCustomerId()` Allow only users
+        # or groups to be members. `member.type == 1 || member.type == 3`
+        # Corresponds to the JSON property `query`
+        # @return [String]
+        attr_accessor :query
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @evaluation = args[:evaluation] if args.key?(:evaluation)
+          @query = args[:query] if args.key?(:query)
+        end
+      end
+      
       # A membership within the Cloud Identity Groups API. A `Membership` defines a
       # relationship between a `Group` and an entity belonging to that `Group`,
       # referred to as a "member".
@@ -1636,6 +1672,11 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # Evaluations of restrictions applied to parent group on this membership.
+        # Corresponds to the JSON property `restrictionEvaluations`
+        # @return [Google::Apis::CloudidentityV1::RestrictionEvaluations]
+        attr_accessor :restriction_evaluations
+      
         def initialize(**args)
            update!(**args)
         end
@@ -1644,6 +1685,26 @@ module Google
         def update!(**args)
           @expiry_detail = args[:expiry_detail] if args.key?(:expiry_detail)
           @name = args[:name] if args.key?(:name)
+          @restriction_evaluations = args[:restriction_evaluations] if args.key?(:restriction_evaluations)
+        end
+      end
+      
+      # The evaluated state of this restriction.
+      class MembershipRoleRestrictionEvaluation
+        include Google::Apis::Core::Hashable
+      
+        # Output only. The current state of the restriction
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @state = args[:state] if args.key?(:state)
         end
       end
       
@@ -1769,6 +1830,44 @@ module Google
         end
       end
       
+      # The evaluated state of this restriction.
+      class RestrictionEvaluation
+        include Google::Apis::Core::Hashable
+      
+        # Output only. The current state of the restriction
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @state = args[:state] if args.key?(:state)
+        end
+      end
+      
+      # Evaluations of restrictions applied to parent group on this membership.
+      class RestrictionEvaluations
+        include Google::Apis::Core::Hashable
+      
+        # The evaluated state of this restriction.
+        # Corresponds to the JSON property `memberRestrictionEvaluation`
+        # @return [Google::Apis::CloudidentityV1::MembershipRoleRestrictionEvaluation]
+        attr_accessor :member_restriction_evaluation
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @member_restriction_evaluation = args[:member_restriction_evaluation] if args.key?(:member_restriction_evaluation)
+        end
+      end
+      
       # The response message for GroupsService.SearchGroups.
       class SearchGroupsResponse
         include Google::Apis::Core::Hashable
@@ -1847,6 +1946,32 @@ module Google
         end
       end
       
+      # The definition of security settings.
+      class SecuritySettings
+        include Google::Apis::Core::Hashable
+      
+        # The definition of MemberRestriction
+        # Corresponds to the JSON property `memberRestriction`
+        # @return [Google::Apis::CloudidentityV1::MemberRestriction]
+        attr_accessor :member_restriction
+      
+        # Output only. The resource name of the security settings. Shall be of the form `
+        # groups/`group_id`/securitySettings`.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @member_restriction = args[:member_restriction] if args.key?(:member_restriction)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
       # The `Status` type defines a logical error model that is suitable for different
       # programming environments, including REST APIs and RPC APIs. It is used by [
       # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
@@ -1960,7 +2085,7 @@ module Google
       end
       
       # The `UserInvitation` resource represents an email that can be sent to an
-      # unmanaged user account inviting them to join the customer’s Google Workspace
+      # unmanaged user account inviting them to join the customer's Google Workspace
       # or Cloud Identity account. An unmanaged account shares an email address domain
       # with the Google Workspace or Cloud Identity account but is not managed by it
       # yet. If the user accepts the `UserInvitation`, the user account will become

data/lib/google/apis/cloudidentity_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module CloudidentityV1
       # Version of the google-apis-cloudidentity_v1 gem
-      GEM_VERSION = "0.12.0"
+      GEM_VERSION = "0.16.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.4.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20210906"
+      REVISION = "20211207"
     end
   end
 end

data/lib/google/apis/cloudidentity_v1/representations.rb

@@ -340,6 +340,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class MemberRestriction
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Membership
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -358,6 +364,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class MembershipRoleRestrictionEvaluation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ModifyMembershipRolesRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -376,6 +388,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class RestrictionEvaluation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class RestrictionEvaluations
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class SearchGroupsResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -394,6 +418,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class SecuritySettings
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Status
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -886,6 +916,15 @@ module Google
         end
       end
       
+      class MemberRestriction
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :evaluation, as: 'evaluation', class: Google::Apis::CloudidentityV1::RestrictionEvaluation, decorator: Google::Apis::CloudidentityV1::RestrictionEvaluation::Representation
+      
+          property :query, as: 'query'
+        end
+      end
+      
       class Membership
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -915,6 +954,15 @@ module Google
           property :expiry_detail, as: 'expiryDetail', class: Google::Apis::CloudidentityV1::ExpiryDetail, decorator: Google::Apis::CloudidentityV1::ExpiryDetail::Representation
       
           property :name, as: 'name'
+          property :restriction_evaluations, as: 'restrictionEvaluations', class: Google::Apis::CloudidentityV1::RestrictionEvaluations, decorator: Google::Apis::CloudidentityV1::RestrictionEvaluations::Representation
+      
+        end
+      end
+      
+      class MembershipRoleRestrictionEvaluation
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :state, as: 'state'
         end
       end
       
@@ -949,6 +997,21 @@ module Google
         end
       end
       
+      class RestrictionEvaluation
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :state, as: 'state'
+        end
+      end
+      
+      class RestrictionEvaluations
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :member_restriction_evaluation, as: 'memberRestrictionEvaluation', class: Google::Apis::CloudidentityV1::MembershipRoleRestrictionEvaluation, decorator: Google::Apis::CloudidentityV1::MembershipRoleRestrictionEvaluation::Representation
+      
+        end
+      end
+      
       class SearchGroupsResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -976,6 +1039,15 @@ module Google
         end
       end
       
+      class SecuritySettings
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :member_restriction, as: 'memberRestriction', class: Google::Apis::CloudidentityV1::MemberRestriction, decorator: Google::Apis::CloudidentityV1::MemberRestriction::Representation
+      
+          property :name, as: 'name'
+        end
+      end
+      
       class Status
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/cloudidentity_v1/service.rb

@@ -920,6 +920,42 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Get Security Settings
+        # @param [String] name
+        #   Required. The security settings to retrieve. Format: `groups/`group_id`/
+        #   securitySettings`
+        # @param [String] read_mask
+        #   Field-level read mask of which fields to return. "*" returns all fields. If
+        #   not specified, all fields will be returned. May only contain the following
+        #   field: `member_restriction`.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1::SecuritySettings] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1::SecuritySettings]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_group_security_settings(name, read_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudidentityV1::SecuritySettings::Representation
+          command.response_class = Google::Apis::CloudidentityV1::SecuritySettings
+          command.params['name'] = name unless name.nil?
+          command.query['readMask'] = read_mask unless read_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Lists the `Group` resources under a customer or namespace.
         # @param [Fixnum] page_size
         #   The maximum number of results to return. Note that the number of results
@@ -1094,6 +1130,44 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Update Security Settings
+        # @param [String] name
+        #   Output only. The resource name of the security settings. Shall be of the form `
+        #   groups/`group_id`/securitySettings`.
+        # @param [Google::Apis::CloudidentityV1::SecuritySettings] security_settings_object
+        # @param [String] update_mask
+        #   Required. The fully-qualified names of fields to update. May only contain the
+        #   following field: `member_restriction.query`.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def update_group_security_settings(name, security_settings_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::CloudidentityV1::SecuritySettings::Representation
+          command.request_object = security_settings_object
+          command.response_representation = Google::Apis::CloudidentityV1::Operation::Representation
+          command.response_class = Google::Apis::CloudidentityV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Check a potential member for membership in a group. **Note:** This feature is
         # only available to Google Workspace Enterprise Standard, Enterprise Plus, and
         # Enterprise for Education; and Cloud Identity Premium accounts. If the account

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-cloudidentity_v1
 version: !ruby/object:Gem::Version
-  version: 0.12.0
+  version: 0.16.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-09-13 00:00:00.000000000 Z
+date: 2021-12-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -57,9 +57,9 @@ licenses:
 - Apache-2.0
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
-  changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-cloudidentity_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudidentity_v1/v0.12.0
-  source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-cloudidentity_v1
+  changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudidentity_v1/CHANGELOG.md
+  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudidentity_v1/v0.16.0
+  source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudidentity_v1
 post_install_message: 
 rdoc_options: []
 require_paths: