SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set
Name | Type | Description | Notes |
---|---|---|---|
extra | dict(str, list[str]) | Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here. | [optional] |
groups | list[str] | Groups is the groups you're testing for. | [optional] |
non_resource_attributes | V1NonResourceAttributes | [optional] | |
resource_attributes | V1ResourceAttributes | [optional] | |
uid | str | UID information about the requesting user. | [optional] |
user | str | User is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups | [optional] |