com.azure.security.keyvault.administration.models.KeyVaultPermission Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of azure-security-keyvault-administration Show documentation

This module contains client library for Microsoft Azure KeyVault Administration.

There is a newer version: 4.6.0

Show newest version

// Copyright (c) Microsoft Corporation. All rights reserved.
// Licensed under the MIT License.

package com.azure.security.keyvault.administration.models;

import com.azure.core.annotation.Immutable;

import java.util.List;

/**
 * A class describing allowed and forbidden actions and data actions of a {@link KeyVaultRoleDefinition}.
 */
@Immutable
public final class KeyVaultPermission {
    private final List actions;
    private final List notActions;
    private final List dataActions;
    private final List notDataActions;

    /**
     * Creates a new {@link KeyVaultPermission} with the specified allowed and forbidden actions and data actions.
     *
     * @param actions Action permissions that are granted.
     * @param notActions Action permissions that are excluded but not denied. They may be granted by other role
     * definitions assigned to a principal.
     * @param dataActions Data action permissions that are granted.
     * @param notDataActions Data action permissions that are excluded but not denied. They may be granted by other role
     * definitions assigned to a principal.
     */
    public KeyVaultPermission(List actions, List notActions, List dataActions,
                              List notDataActions) {
        this.actions = actions;
        this.notActions = notActions;
        this.dataActions = dataActions;
        this.notDataActions = notDataActions;
    }

    /**
     * Get the action permissions that are granted.
     *
     * @return The action permissions that are granted.
     */
    public List getActions() {
        return actions;
    }

    /**
     * Get the action permissions that are excluded but not denied. They may be granted by other role definitions
     * assigned to a principal
     *
     * @return The action permissions that are excluded but not denied.
     */
    public List getNotActions() {
        return notActions;
    }

    /**
     * Get the data action permissions that are granted.
     *
     * @return The data action permissions that are granted.
     */
    public List getDataActions() {
        return dataActions;
    }

    /**
     * Get the data action permissions that are excluded but not denied.
     *
     * @return The data action permissions that are excluded but not denied.
     */
    public List getNotDataActions() {
        return notDataActions;
    }
}