Google Search Appliance Policy ACL API Developers Guide - Manual (Page 8)

Google Search Appliance: Policy ACL API Developer’s Guide Policy ACL API Developer’s Guide 8
Here are the relevant protocol buffer message definitions:
// Information about the domain associated with the principal.
message Domain {
enum DomainType {
// Domain type used by most windows / active directory deployments. Currently
this
// is the only supported domain type.
NETBIOS = 0;
}
required string name = 1;
required DomainType type = 2 [default = NETBIOS];
}
// Information that fully specifies the user/group in the ACL.
message AclPrincipal {
enum SCOPE {
USER = 1;
GROUP = 2;
}
enum CaseSensitivity {
// All strings in AclPrincipal and its sub-messages are treated as
// case-sensitive.
EVERYTHING_CASE_SENSITIVE = 0;
// All strings in AclPrincipal and its sub-messages are treated as
// case-insensitive.
EVERYTHING_CASE_INSENSITIVE = 1;
}
required SCOPE scope = 1;
required string name = 2;
optional string name_space = 3;
optional Domain domain = 4;
required CaseSensitivity case_sensitive = 5 [default =
EVERYTHING_CASE_SENSITIVE];
}
message GsaEntry {
enum ACCESS {
PERMIT = 1;
DENY = 2;
}
required ACCESS access = 2;
required AclPrincipal principal = 5;
}
message GsaAclEntry {
optional GsaEntry gsa_entry = 1;
}
message GsaAcl {
repeated GsaAclEntry entries = 1;
}