Annotation Interface Acl.Matcher

Enclosing class:
Acl

@Target({TYPE,METHOD}) @Retention(RUNTIME) @Documented public static @interface Acl.Matcher
A principal matcher that can be used in an ACL.

A principal is a very broad concept. It can correlate to a person, a system, or a more abstract concept, such as the internet.

A single request may have multiple principals associated with it, for example, it may have come from a particular source system, and it may have certain credentials associated with it. When a matcher is applied to the request, the request is considered to match if at least one of the principals attached to the request matches.

Each Matcher can be configured either with a 'service' or a 'principal', but not both.

  • Optional Element Summary

    Optional Elements
    Modifier and Type
    Optional Element
    Description
    A principal matcher that can be specified with no additional configuration.
    Match a service principal.
  • Element Details

    • service

      String service
      Match a service principal.

      This matches a service in the same project.

      Supports glob matching, that is, * means all services in this project.

      Default:
      ""
    • principal

      Acl.Principal principal
      A principal matcher that can be specified with no additional configuration.
      Default:
      UNSPECIFIED