ths-apimatic-sdk-sdk 1.0.0

data/lib/thought_spot_public_rest_api/controllers/security_controller.rb

@@ -0,0 +1,749 @@
+# thought_spot_public_rest_api
+#
+# This file was automatically generated by
+# APIMATIC v3.0 ( https://www.apimatic.io ).
+
+module ThoughtSpotPublicRestApi
+  # SecurityController
+  class SecurityController < BaseController
+    #  <span class="since-beta-tag">Version: 9.0.0.cl or later</span>
+    # Transfers the ownership of one or several objects from one user to
+    # another.
+    # Requires `ADMINISTRATION` (**Can administer ThoughtSpot**) privilege.
+    # If [Role-Based Access Control
+    # (RBAC)](https://developers.thoughtspot.com/docs/rbac) is enabled on your
+    # instance, the `USER_ADMINISTRATION` (**Can manage users**) privilege and
+    # edit access to the objects are required.
+    # #### Endpoint URL
+    # @param [AssignChangeAuthorRequest] body Required parameter: TODO: type
+    # description here
+    # @return [ApiResponse] Complete http response with raw body and status code.
+    def assign_change_author(body)
+      @api_call
+        .request(new_request_builder(HttpMethodEnum::POST,
+                                     '/api/rest/2.0/security/metadata/assign',
+                                     Server::DEFAULT)
+                   .header_param(new_parameter('application/json', key: 'Content-Type'))
+                   .body_param(new_parameter(body)
+                                .is_required(true))
+                   .body_serializer(proc do |param| param.to_json unless param.nil? end)
+                   .auth(Single.new('bearerAuth')))
+        .response(new_response_handler
+                    .is_response_void(true)
+                    .is_api_response(true)
+                    .local_error('400',
+                                 'Invalid request.',
+                                 ErrorResponseException)
+                    .local_error('401',
+                                 'Unauthorized access.',
+                                 ErrorResponseException)
+                    .local_error('403',
+                                 'Forbidden access.',
+                                 ErrorResponseException)
+                    .local_error('500',
+                                 'Unexpected error',
+                                 ErrorResponseException))
+        .execute
+    end
+
+    # <span class="since-beta-tag">Beta</span> <span
+    # class="since-beta-tag">Version: 10.12.0.cl or later</span>
+    # Fetches column security rules for specified tables.
+    # This API endpoint retrieves column-level security rules configured for
+    # tables. It returns information about which columns are secured and which
+    # groups have access to those columns.
+    # #### Usage guidelines
+    # - Provide an array of table identifiers using either `identifier` (GUID or
+    # name) or `obj_identifier` (object ID)
+    # - At least one of `identifier` or `obj_identifier` must be provided for
+    # each table
+    # - The API returns column security rules for all specified tables
+    # - Users must have appropriate permissions to access security rules for the
+    # specified tables
+    # #### Required permissions
+    # - `ADMINISTRATION` - Can administer ThoughtSpot
+    # - `DATAMANAGEMENT` - Can manage data
+    # - `CAN_MANAGE_WORKSHEET_VIEWS_TABLES` - Can manage worksheet views and
+    # tables
+    # #### Example request
+    # ```json
+    # {
+    #   "tables": [
+    #     {
+    #       "identifier": "table-guid",
+    #       "obj_identifier": "table-object-id"
+    #     }
+    #   ]
+    # }
+    # ```
+    # #### Response format
+    # The API returns an array of `ColumnSecurityRuleResponse` objects wrapped
+    # in a `data` field. Each `ColumnSecurityRuleResponse` object contains:
+    # - Table information (GUID and object ID)
+    # - Array of column security rules with column details, group access, and
+    # source table information
+    # #### Example response
+    # ```json
+    # {
+    #   "data": [
+    #     {
+    #       "guid": "table-guid",
+    #       "objId": "table-object-id",
+    #       "columnSecurityRules": [
+    #         {
+    #           "column": {
+    #             "id": "col_123",
+    #             "name": "Salary"
+    #           },
+    #           "groups": [
+    #             {
+    #               "id": "group_1",
+    #               "name": "HR Department"
+    #             }
+    #           ],
+    #           "sourceTableDetails": {
+    #             "id": "source-table-guid",
+    #             "name": "Employee_Data"
+    #           }
+    #         }
+    #       ]
+    #     }
+    #   ]
+    # }
+    # ```
+    # #### Endpoint URL
+    # @param [FetchColumnSecurityRulesRequest] body Required parameter: TODO:
+    # type description here
+    # @return [ApiResponse] Complete http response with raw body and status code.
+    def fetch_column_security_rules(body)
+      @api_call
+        .request(new_request_builder(HttpMethodEnum::POST,
+                                     '/api/rest/2.0/security/column/rules/fetch',
+                                     Server::DEFAULT)
+                   .header_param(new_parameter('application/json', key: 'Content-Type'))
+                   .body_param(new_parameter(body)
+                                .is_required(true))
+                   .header_param(new_parameter('application/json', key: 'accept'))
+                   .body_serializer(proc do |param| param.to_json unless param.nil? end)
+                   .auth(Single.new('bearerAuth')))
+        .response(new_response_handler
+                    .deserializer(APIHelper.method(:custom_type_deserializer))
+                    .deserialize_into(ColumnSecurityRuleResponse.method(:from_hash))
+                    .is_api_response(true)
+                    .is_response_array(true)
+                    .local_error('400',
+                                 'Bad request - Table not found or invalid parameters',
+                                 ErrorResponseException)
+                    .local_error('401',
+                                 'Unauthorized access.',
+                                 ErrorResponseException)
+                    .local_error('403',
+                                 'Forbidden - User doesn\'t have permission to access security'\
+                                  ' rules for this table',
+                                 ErrorResponseException)
+                    .local_error('500',
+                                 'Internal server error',
+                                 ErrorResponseException))
+        .execute
+    end
+
+    #  <span class="since-beta-tag">Version: 26.3.0.cl or later</span>
+    # This API fetches the object privileges present for the given list of
+    # principals (user or group), on the given set of objects. It supports
+    # pagination, which can be enabled and configured using the request
+    # parameters. It provides users access to certain features based on
+    # privilege based access control.
+    # #### Usage guidelines
+    # - Specify the `type` (`USER` or `USER_GROUP`) and `identifier` (either
+    # GUID or name) of the principals for which you want to retrieve object
+    # privilege information in the `principals` array.
+    # - Specify the `type`  (`LOGICAL_TABLE`)  and `identifier` (either GUID or
+    # name) of the metadata objects for which you want to retrieve object
+    # privilege information in the `metadata` array. Only `LOGICAL_TABLE`
+    # metadata type is supported for now. It may be extended for other metadata
+    # types in future.
+    # - To control the offset from where principals have to be fetched, use
+    # `record_offset`. When `record_offset` is 0, information is fetched from
+    # the beginning.
+    # - To control the number of principals to be fetched, use `record_size`.
+    # Default `record_size` is 20.
+    # - Ensure `record_offset` for a subsequent request is one more than the
+    # value of `record_size` of the previous request.
+    # - Ensure using correct Authorization Bearer Token corresponding to
+    # specific user & org.
+    # #### Example request
+    # ```json
+    # {
+    #   "principals": [
+    #     {
+    #       "type": "type-1",
+    #       "identifier": "principal-guid-or-name-1"
+    #     },
+    #     {
+    #       "type": "type-2",
+    #       "identifier": "principal-guid-or-name-2"
+    #     }
+    #   ],
+    #   "metadata": [
+    #     {
+    #       "type": "metadata-type-1",
+    #       "identifier": "metadata-guid-or-name-1"
+    #     },
+    #     {
+    #       "type": "metadata-type-2",
+    #       "identifier": "metadata-guid-or-name-2"
+    #     }
+    #   ],
+    #   "record_offset": 0,
+    #   "record_size": 20
+    # }
+    # ```
+    # #### Response format
+    # The API returns an array of `metadata_object_privileges` objects wrapped
+    # in JSON. Each `metadata_object_privileges` object contains:
+    # - Metadata information (GUID, name and type)
+    # - Array of `principal_object_privilege_info`.
+    # - Each `principal_object_privilege_info` contains:
+    #   - Principal type. All principals of this type are listed as described
+    # below.
+    #   - Array of `principal_object_privileges`.
+    #   - Each `principal_object_privileges` contains:
+    #     - Principal information (GUID, name, subtype)
+    #     - List of applied object level privileges.
+    # #### Example response
+    # ```json
+    # {
+    #     "metadata_object_privileges": [
+    #       {
+    #         "metadata_id": "metadata-guid-1",
+    #         "metadata_name": "metadata-name-1",
+    #         "metadata_type": "metadata-type-1",
+    #         "principal_object_privilege_info": [
+    #           {
+    #             "principal_type": "principal-type-1",
+    #             "principal_object_privileges": [
+    #               {
+    #                 "principal_id": "principal-guid-1",
+    #                 "principal_name": "principal-name-1",
+    #                 "principal_sub_type": "principal-sub-type-1",
+    #                 "object_privileges": "[object-privilege-1,
+    # object-privilege-2]"
+    #               },
+    #               {
+    #                 "principal_id": "principal-guid-2",
+    #                 "principal_name": "principal-name-2",
+    #                 "principal_sub_type": "principal-sub-type-2",
+    #                 "object_privileges": "[object-privilege-1,
+    # object-privilege-2]"
+    #               }
+    #             ]
+    #           },
+    #           {
+    #             "principal_type": "principal-type-2",
+    #             "principal_object_privileges": [
+    #               {
+    #                 "principal_id": "principal-guid-3",
+    #                 "principal_name": "principal-guid-4",
+    #                 "principal_sub_type": "principal-sub-type-4",
+    #                 "object_privileges": "[object-privilege-1]"
+    #               }
+    #             ]
+    #           }
+    #         ]
+    #       },
+    #       {
+    #         "metadata_id": "metadata-guid-2",
+    #         "metadata_name": "metadata-name-2",
+    #         "metadata_type": "metadata-type-2",
+    #         "principal_object_privilege_info": [
+    #           {
+    #             "principal_type": "principal-type-1",
+    #             "principal_object_privileges": [
+    #               {
+    #                 "principal_id": "principal-guid-1",
+    #                 "principal_name": "principal-name-1",
+    #                 "principal_sub_type": "principal-sub-type-1",
+    #                 "object_privileges": "[object-privilege-3,
+    # object-privilege-4]"
+    #               },
+    #               {
+    #                 "principal_id": "principal-guid-2",
+    #                 "principal_name": "principal-name-2",
+    #                 "principal_sub_type": "principal-sub-type-2",
+    #                 "object_privileges": "[object-privilege-4]"
+    #               }
+    #             ]
+    #           }
+    #         ]
+    #       }
+    #     ]
+    # }
+    # ```
+    # #### Endpoint URL
+    # @param [FetchObjectPrivilegesRequest] body Required parameter: TODO: type
+    # description here
+    # @return [ApiResponse] Complete http response with raw body and status code.
+    def fetch_object_privileges(body)
+      @api_call
+        .request(new_request_builder(HttpMethodEnum::POST,
+                                     '/api/rest/2.0/security/metadata/fetch-object-privileges',
+                                     Server::DEFAULT)
+                   .header_param(new_parameter('application/json', key: 'Content-Type'))
+                   .body_param(new_parameter(body)
+                                .is_required(true))
+                   .header_param(new_parameter('application/json', key: 'accept'))
+                   .body_serializer(proc do |param| param.to_json unless param.nil? end)
+                   .auth(Single.new('bearerAuth')))
+        .response(new_response_handler
+                    .deserializer(APIHelper.method(:custom_type_deserializer))
+                    .deserialize_into(ObjectPrivilegesOfMetadataResponse.method(:from_hash))
+                    .is_api_response(true)
+                    .local_error('400',
+                                 'Invalid request.',
+                                 ErrorResponseException)
+                    .local_error('401',
+                                 'Unauthorized access.',
+                                 ErrorResponseException)
+                    .local_error('403',
+                                 'Forbidden access.',
+                                 ErrorResponseException)
+                    .local_error('500',
+                                 'Unexpected error',
+                                 ErrorResponseException))
+        .execute
+    end
+
+    #  <span class="since-beta-tag">Version: 9.0.0.cl or later</span>
+    # Fetches object permission details for a given principal object such as a
+    # user and group.
+    # Requires view access to the metadata object.
+    # #### Usage guidelines
+    # * To get a list of all metadata objects that a user or group can access,
+    # specify the `type` and GUID or name of the principal.
+    # * To get permission details for a specific object, add the `type` and GUID
+    # or name of the metadata object to your API request.
+    # Upon successful execution, the API returns a list of metadata objects and
+    # permission details for each object.
+    # #### Endpoint URL
+    # @param [FetchPermissionsOfPrincipalsRequest] body Required parameter:
+    # TODO: type description here
+    # @return [ApiResponse] Complete http response with raw body and status code.
+    def fetch_permissions_of_principals(body)
+      @api_call
+        .request(new_request_builder(HttpMethodEnum::POST,
+                                     '/api/rest/2.0/security/principals/fetch-permissions',
+                                     Server::DEFAULT)
+                   .header_param(new_parameter('application/json', key: 'Content-Type'))
+                   .body_param(new_parameter(body)
+                                .is_required(true))
+                   .header_param(new_parameter('application/json', key: 'accept'))
+                   .body_serializer(proc do |param| param.to_json unless param.nil? end)
+                   .auth(Single.new('bearerAuth')))
+        .response(new_response_handler
+                    .deserializer(APIHelper.method(:custom_type_deserializer))
+                    .deserialize_into(PermissionOfPrincipalsResponse.method(:from_hash))
+                    .is_api_response(true)
+                    .local_error('400',
+                                 'Invalid request.',
+                                 ErrorResponseException)
+                    .local_error('401',
+                                 'Unauthorized access.',
+                                 ErrorResponseException)
+                    .local_error('403',
+                                 'Forbidden access.',
+                                 ErrorResponseException)
+                    .local_error('500',
+                                 'Unexpected error',
+                                 ErrorResponseException))
+        .execute
+    end
+
+    #  <span class="since-beta-tag">Version: 9.0.0.cl or later</span>
+    # Fetches permission details for a given metadata object.
+    # Requires view access to the metadata object.
+    # #### Usage guidelines
+    # * To fetch a list of users and groups for a metadata object, specify
+    # `type` and GUID or name of the metadata object.
+    # * To get permission details for a specific user or group, add `type` and
+    # GUID or name of the principal object to your API request.
+    # Upon successful execution, the API returns permission details and
+    # principal information for the object specified in the API request.
+    # #### Endpoint URL
+    # @param [FetchPermissionsOnMetadataRequest] body Required parameter: TODO:
+    # type description here
+    # @return [ApiResponse] Complete http response with raw body and status code.
+    def fetch_permissions_on_metadata(body)
+      @api_call
+        .request(new_request_builder(HttpMethodEnum::POST,
+                                     '/api/rest/2.0/security/metadata/fetch-permissions',
+                                     Server::DEFAULT)
+                   .header_param(new_parameter('application/json', key: 'Content-Type'))
+                   .body_param(new_parameter(body)
+                                .is_required(true))
+                   .header_param(new_parameter('application/json', key: 'accept'))
+                   .body_serializer(proc do |param| param.to_json unless param.nil? end)
+                   .auth(Single.new('bearerAuth')))
+        .response(new_response_handler
+                    .deserializer(APIHelper.method(:custom_type_deserializer))
+                    .deserialize_into(PermissionOfMetadataResponse.method(:from_hash))
+                    .is_api_response(true)
+                    .local_error('400',
+                                 'Invalid request.',
+                                 ErrorResponseException)
+                    .local_error('401',
+                                 'Unauthorized access.',
+                                 ErrorResponseException)
+                    .local_error('403',
+                                 'Forbidden access.',
+                                 ErrorResponseException)
+                    .local_error('500',
+                                 'Unexpected error',
+                                 ErrorResponseException))
+        .execute
+    end
+
+    #  <span class="since-beta-tag">Version: 26.3.0.cl or later</span>
+    # This API allows the addition or deletion of object level privileges for a
+    # set of users and groups, on a set of metadata objects. It provides users
+    # to access certain features based on privilege based access control.
+    # #### Usage guidelines
+    # - Specify the `operation`. The supported operations are: `ADD`, `REMOVE`.
+    # - Specify the type of the objects on which the object privileges are being
+    # provided in `metadata_type`. Only `LOGICAL_TABLE` metadata type is
+    # supported for now. It may be extended for other metadata types in future.
+    # - Specify the list of object privilege types in the
+    # `object_privilege_types` array. The supported object privilege types are:
+    # `SPOTTER_COACHING_PRIVILEGE`.
+    # - Specify the identifiers (either GUID or name) for the metadata objects
+    # in the `metadata_identifiers` array.
+    # - Specify the `type` (`USER` or `USER_GROUP`) and `identifier` (either
+    # GUID or name) of the principals to which you want to apply the given
+    # operation and given object privileges in the `principals` array.
+    # - Ensure using correct Authorization Bearer Token corresponding to
+    # specific user & org.
+    # #### Example request
+    # ```json
+    # {
+    #   "operation": "operation-type",
+    #   "metadata_type": "metadata-type",
+    #   "object_privilege_types": ["privilege-type-1", "privilege-type-2"],
+    #   "metadata_identifiers": ["metadata-guid-or-name-1",
+    # "metadata-guid-or-name-1"],
+    #   "principals": [
+    #     {
+    #       "type": "type-1",
+    #       "identifier": "principal-guid-or-name-1"
+    #     },
+    #     {
+    #       "type": "type-2",
+    #       "identifier": "principal-guid-or-name-2"
+    #     }
+    #   ]
+    # }
+    # ```
+    # > ###### Note:
+    # > * Only admin users, users with edit access and users with coaching
+    # privilege on a given data-model can add or remove principals related to
+    # SPOTTER_COACHING_PRIVILEGE
+    # #### Endpoint URL
+    # @param [ManageObjectPrivilegeRequest] body Required parameter: TODO: type
+    # description here
+    # @return [ApiResponse] Complete http response with raw body and status code.
+    def manage_object_privilege(body)
+      @api_call
+        .request(new_request_builder(HttpMethodEnum::POST,
+                                     '/api/rest/2.0/security/metadata/manage-object-privilege',
+                                     Server::DEFAULT)
+                   .header_param(new_parameter('application/json', key: 'Content-Type'))
+                   .body_param(new_parameter(body)
+                                .is_required(true))
+                   .body_serializer(proc do |param| param.to_json unless param.nil? end)
+                   .auth(Single.new('bearerAuth')))
+        .response(new_response_handler
+                    .is_response_void(true)
+                    .is_api_response(true)
+                    .local_error('400',
+                                 'Invalid request',
+                                 ErrorResponseException)
+                    .local_error('401',
+                                 'Unauthorized access',
+                                 ErrorResponseException)
+                    .local_error('403',
+                                 'Forbidden access',
+                                 ErrorResponseException)
+                    .local_error('500',
+                                 'Unexpected error',
+                                 ErrorResponseException))
+        .execute
+    end
+
+    # <span class="since-beta-tag">Beta</span> <span
+    # class="since-beta-tag">Version: 10.9.0.cl or later</span>
+    # Allows publishing metadata objects across organizations in ThoughtSpot.
+    # Requires ADMINISTRATION role and TENANT scope.
+    # The API endpoint allows publishing the following types of metadata
+    # objects:
+    # * Liveboards
+    # * Answers
+    # * Logical Tables
+    # This API will essentially share the objects along with it's dependencies
+    # to
+    # the org admins of the orgs to which it is being published.
+    # #### Endpoint URL
+    # @param [PublishMetadataRequest] body Required parameter: TODO: type
+    # description here
+    # @return [ApiResponse] Complete http response with raw body and status code.
+    def publish_metadata(body)
+      @api_call
+        .request(new_request_builder(HttpMethodEnum::POST,
+                                     '/api/rest/2.0/security/metadata/publish',
+                                     Server::DEFAULT)
+                   .header_param(new_parameter('application/json', key: 'Content-Type'))
+                   .body_param(new_parameter(body)
+                                .is_required(true))
+                   .body_serializer(proc do |param| param.to_json unless param.nil? end)
+                   .auth(Single.new('bearerAuth')))
+        .response(new_response_handler
+                    .is_response_void(true)
+                    .is_api_response(true)
+                    .local_error('400',
+                                 'Invalid request.',
+                                 ErrorResponseException)
+                    .local_error('401',
+                                 'Unauthorized access.',
+                                 ErrorResponseException)
+                    .local_error('403',
+                                 'Forbidden access.',
+                                 ErrorResponseException)
+                    .local_error('500',
+                                 'Unexpected error',
+                                 ErrorResponseException))
+        .execute
+    end
+
+    #  <span class="since-beta-tag">Version: 9.0.0.cl or later</span>
+    # Allows sharing one or several metadata objects with users and groups in
+    # ThoughtSpot.
+    # Requires edit access to the metadata object.
+    # #### Supported metadata objects:
+    # * Liveboards
+    # * Visualizations
+    # * Answers
+    # * Models
+    # * Views
+    # * Connections
+    # #### Object permissions
+    # You can provide `READ_ONLY` or `MODIFY` access when sharing an object with
+    # another user or group. The `READ_ONLY` permission grants view access to
+    # the shared object, whereas `MODIFY` provides edit access.
+    # To prevent a user or group from accessing the shared object, specify the
+    # GUID or name of the principal and set `shareMode` to `NO_ACCESS`.
+    # #### Sharing a visualization
+    # * Sharing a visualization implicitly shares the entire Liveboard with the
+    # recipient.
+    # * Object permissions set for a shared visualization also apply to the
+    # Liveboard unless overridden by another API request or via UI.
+    # * If email notifications for object sharing are enabled, a notification
+    # with a link to the shared visualization will be sent to the recipient’s
+    # email address. Although this link opens the shared visualization,
+    # recipients can also access other visualizations in the Liveboard.
+    # #### Endpoint URL
+    # @param [ShareMetadataRequest] body Required parameter: TODO: type
+    # description here
+    # @return [ApiResponse] Complete http response with raw body and status code.
+    def share_metadata(body)
+      @api_call
+        .request(new_request_builder(HttpMethodEnum::POST,
+                                     '/api/rest/2.0/security/metadata/share',
+                                     Server::DEFAULT)
+                   .header_param(new_parameter('application/json', key: 'Content-Type'))
+                   .body_param(new_parameter(body)
+                                .is_required(true))
+                   .body_serializer(proc do |param| param.to_json unless param.nil? end)
+                   .auth(Single.new('bearerAuth')))
+        .response(new_response_handler
+                    .is_response_void(true)
+                    .is_api_response(true)
+                    .local_error('400',
+                                 'Invalid request.',
+                                 ErrorResponseException)
+                    .local_error('401',
+                                 'Unauthorized access.',
+                                 ErrorResponseException)
+                    .local_error('403',
+                                 'Forbidden access.',
+                                 ErrorResponseException)
+                    .local_error('500',
+                                 'Unexpected error',
+                                 ErrorResponseException))
+        .execute
+    end
+
+    # <span class="since-beta-tag">Beta</span> <span
+    # class="since-beta-tag">Version: 10.9.0.cl or later</span>
+    # Allows unpublishing metadata objects from organizations in ThoughtSpot.
+    # Requires ADMINISTRATION role and TENANT scope.
+    # The API endpoint allows unpublishing the following types of metadata
+    # objects:
+    # * Liveboards
+    # * Answers
+    # * Logical Tables
+    # When unpublishing objects, you can:
+    # * Include dependencies by setting `include_dependencies` to true - this
+    # will unpublish all dependent objects if no other published object is using
+    # them
+    # * Force unpublish by setting `force` to true - this will break all
+    # dependent objects in the unpublished organizations
+    # #### Endpoint URL
+    # @param [UnpublishMetadataRequest] body Required parameter: TODO: type
+    # description here
+    # @return [ApiResponse] Complete http response with raw body and status code.
+    def unpublish_metadata(body)
+      @api_call
+        .request(new_request_builder(HttpMethodEnum::POST,
+                                     '/api/rest/2.0/security/metadata/unpublish',
+                                     Server::DEFAULT)
+                   .header_param(new_parameter('application/json', key: 'Content-Type'))
+                   .body_param(new_parameter(body)
+                                .is_required(true))
+                   .body_serializer(proc do |param| param.to_json unless param.nil? end)
+                   .auth(Single.new('bearerAuth')))
+        .response(new_response_handler
+                    .is_response_void(true)
+                    .is_api_response(true)
+                    .local_error('400',
+                                 'Invalid request.',
+                                 ErrorResponseException)
+                    .local_error('401',
+                                 'Unauthorized access.',
+                                 ErrorResponseException)
+                    .local_error('403',
+                                 'Forbidden access.',
+                                 ErrorResponseException)
+                    .local_error('500',
+                                 'Unexpected error',
+                                 ErrorResponseException))
+        .execute
+    end
+
+    # <span class="since-beta-tag">Beta</span> <span
+    # class="since-beta-tag">Version: 10.12.0.cl or later</span>
+    # Creates, updates, or deletes column security rules for specified tables.
+    # This API endpoint allows you to create, update, or delete column-level
+    # security rules on columns of a table. The operation follows an "all or
+    # none" policy: if defining security rules for any of the provided columns
+    # fails, the entire operation will be rolled back, and no rules will be
+    # created.
+    # #### Usage guidelines
+    # - Provide table identifier using either `identifier` (GUID or name) or
+    # `obj_identifier` (object ID)
+    # - Use `clear_csr: true` to remove all column security rules from the table
+    # - For each column, specify the security rule using `column_security_rules`
+    # array
+    # - Use `is_unsecured: true` to mark a specific column as unprotected
+    # - Use `group_access` operations to manage group associations:
+    #   - `ADD`: Add groups to the column's access list
+    #   - `REMOVE`: Remove groups from the column's access list
+    #   - `REPLACE`: Replace all existing groups with the specified groups
+    # #### Required permissions
+    # - `ADMINISTRATION` - Can administer ThoughtSpot
+    # - `DATAMANAGEMENT` - Can manage data (if RBAC is disabled)
+    # - `CAN_MANAGE_WORKSHEET_VIEWS_TABLES` - Can manage worksheet views and
+    # tables (if RBAC is enabled)
+    # #### Example request
+    # ```json
+    # {
+    #   "identifier": "table-guid",
+    #   "obj_identifier": "table-object-id",
+    #   "clear_csr": false,
+    #   "column_security_rules": [
+    #     {
+    #       "column_identifier": "col id or col name",
+    #       "is_unsecured": false,
+    #       "group_access": [
+    #         {
+    #           "operation": "ADD",
+    #           "group_identifiers": ["hr_group_id", "hr_group_name",
+    # "finance_group_id"]
+    #         }
+    #       ]
+    #     },
+    #     {
+    #       "column_identifier": "col id or col name",
+    #       "is_unsecured": true
+    #     },
+    #     {
+    #       "column_identifier": "col id or col name",
+    #       "is_unsecured": false,
+    #       "group_access": [
+    #         {
+    #           "operation": "REPLACE",
+    #           "group_identifiers": ["management_group_id",
+    # "management_group_name"]
+    #         }
+    #       ]
+    #     }
+    #   ]
+    # }
+    # ```
+    # #### Request Body Schema
+    # - `identifier` (string, optional): GUID or name of the table for which we
+    # want to create column security rules
+    # - `obj_identifier` (string, optional): The object ID of the table
+    # - `clear_csr` (boolean, optional): If true, then all the secured columns
+    # will be marked as unprotected, and all the group associations will be
+    # removed
+    # - `column_security_rules` (array of objects, required): An array where
+    # each object defines the security rule for a specific column
+    # Each column security rule object contains:
+    # - `column_identifier` (string, required): Column identifier (col_id or
+    # name)
+    # - `is_unsecured` (boolean, optional): If true, the column will be marked
+    # as unprotected and all groups associated with it will be removed
+    # - `group_access` (array of objects, optional): Array of group operation
+    # objects
+    # Each group operation object contains:
+    # - `operation` (string, required): Operation type - ADD, REMOVE, or REPLACE
+    # - `group_identifiers` (array of strings, required): Array of group
+    # identifiers (name or GUID) on which the operation will be performed
+    # #### Response
+    # This API does not return any response body. A successful operation returns
+    # HTTP 200 status code.
+    # #### Operation Types
+    # - **ADD**: Adds the specified groups to the column's access list
+    # - **REMOVE**: Removes the specified groups from the column's access list
+    # - **REPLACE**: Replaces all existing groups with the specified groups
+    # #### Endpoint URL
+    # @param [UpdateColumnSecurityRulesRequest] body Required parameter: TODO:
+    # type description here
+    # @return [ApiResponse] Complete http response with raw body and status code.
+    def update_column_security_rules(body)
+      @api_call
+        .request(new_request_builder(HttpMethodEnum::POST,
+                                     '/api/rest/2.0/security/column/rules/update',
+                                     Server::DEFAULT)
+                   .header_param(new_parameter('application/json', key: 'Content-Type'))
+                   .body_param(new_parameter(body)
+                                .is_required(true))
+                   .body_serializer(proc do |param| param.to_json unless param.nil? end)
+                   .auth(Single.new('bearerAuth')))
+        .response(new_response_handler
+                    .is_response_void(true)
+                    .is_api_response(true)
+                    .local_error('400',
+                                 'Bad request - Invalid parameters or table not found',
+                                 ErrorResponseException)
+                    .local_error('401',
+                                 'Unauthorized access.',
+                                 ErrorResponseException)
+                    .local_error('403',
+                                 'Forbidden - User doesn\'t have permission to modify security'\
+                                  ' rules for this table',
+                                 ErrorResponseException)
+                    .local_error('500',
+                                 'Internal server error',
+                                 ErrorResponseException))
+        .execute
+    end
+  end
+end