W#NSrSSKJr SSKJr SSKJr SSKJrJrJr SSK J r SSK J r SSK Jr S rS \ R S S S \\S\4SjrS \ R S S S \\S\4SjrS \ R S S 4SjrS \ R S S S\\\44SjrS"S \ R S S S\4SjjrS \ R SSS\S\S\\\\44 SjrS#S \ R SSS\S\S\S\\\\44 SjjrS \ R 4SjrSrS \ R SS S\ R:4S jrg!)$z2The BigQuery CLI row access policy client library.)absolute_import)division)print_function)AnyDictList)iam)bigquery_client) bq_id_utilsz!roles/bigquery.filteredDataViewerbqclientpolicy_referencez4bq_id_utils.ApiClientHelper.RowAccessPolicyReferencegranteesfilter_predicatecURURURURS.UUS.nUR 5R 5R URURURUS9R5$)aCreate a row access policy on the given table reference. Arguments: bqclient: BigQuery client to use for the request. policy_reference: Reference to the row access policy to create. grantees: Users or groups that can access rows protected by the row access policy. filter_predicate: A SQL boolean expression that needs to be true for a row to be included in the result. Returns: rowAccessPolicy: The created row access policy defined in google3/google/cloud/bigquery/v2/row_access_policy.proto;l=235;rcl=642795091  projectId datasetIdtableIdpolicyIdrowAccessPolicyReferencefilterPredicater)rrrbody)rrrrGetRowAccessPoliciesApiClientrowAccessPoliciesinsertexecuter r rrrow_access_policys /platform/bq/clients/client_row_access_policy.pycreate_row_access_policyr!s,(11'11%--&// # * ,,. v$..$.."**  wy c2URURURURS.UUS.nUR 5R 5R URURURURUS9R5$)aUpdate a row access policy on the given table reference. Arguments: bqclient: BigQuery client to use for the request. policy_reference: Reference to the row access policy to update. grantees: Users or groups that can access rows protected by the row access policy. filter_predicate: A SQL boolean expression that needs to be true for a row to be included in the result. Returns: rowAccessPolicy: The updated row access policy defined in google3/google/cloud/bigquery/v2/row_access_policy.proto;l=235;rcl=642795091 rr)rrrrr)rrrrrrupdaterrs r update_row_access_policyr%?s,(11'11%--&// # * ,,. v$..$.."**#,, wy r"c>[X5nSU;a [X5 U$)z5Get a row access policy on the given table reference.r) _get_row_access_policy_reference_set_row_access_policy_grantees)r r responses r get_row_access_policyr*ks# .h I(8+#H7 /r"returncUR5R5RURURUR UR S9R5$)zEReturns the RowAccessPolicyReference for the given row access policy.r)rrgetrrrrr)r r s r r'r'wsZ ,,. s$..$.."**#,,   wy r"forcecUR5R5RURURUR UR US9R5$)z8Delete a row access policy on the given table reference.)rrrrr.)rrdeleterrrrr)r r r.s r delete_row_access_policyr1s],,. v$..$.."**#,, wy r"table_referencez*bq_id_utils.ApiClientHelper.TableReference page_size page_tokencUR5R5RURURUR UUS9R 5$)z8Lists row access policies for the given table reference.)rrrpageSize pageToken)rrlistrrrrr r2r3r4s r _list_row_access_policiesr:sW,,. t#--#--!))  wy r"max_concurrent_iam_callscZ[UUUUS9nSU;aUSnUH n[UUS9 M U$)aLLists row access policies for the given table reference. Arguments: bqclient: BigQuery client to use for the request. table_reference: Reference to the table. page_size: Number of results to return. page_token: Token to retrieve the next page of results. max_concurrent_iam_calls: Number of concurrent calls to getIAMPolicy. Returns: A dict that contains entries: 'rowAccessPolicies': a list of row access policies, with an additional 'grantees' field that contains the row access policy grantees. 'nextPageToken': nextPageToken for the next page, if present. r9r)r r)r:r()r r2r3r4r;r)row_access_policiesrs r &list_row_access_policies_with_granteesr>sP,'% ( H$"#670%-1 /r"c[RRR"S0USD6n[ XS9n[ U5nXAS'g)z1Sets the grantees on the given Row Access Policy.r)r referencerN)r ApiClientHelperRowAccessPolicyReferenceCreate get_row_access_policy_iam_policy/_get_grantees_from_row_access_policy_iam_policy)r rrow_access_policy_ref iam_policyrs r r(r(sT !!::AA 8 9 0*=Z H("*Jr"cURS5nU(d/$[SU5S5nU(d/$URS/5$)zAReturns the filtered data viewer members of the given IAM policy.bindingsc3\# UH"nURS5[:XdMUv M$ g7f)roleN)r-_FILTERED_DATA_VIEWER_ROLE).0bindings r B_get_grantees_from_row_access_policy_iam_policy..s+!g [[ $> > '!s, ,Nmembers)r-next)rHrJfiltered_data_viewer_bindings r rFrFsR ^^J '(  I!%!  " & I % ) ))R 88r"r@cD[R"U[RRSS9 SUR<SUR <SUR <SUR<3nUR5R5RUS9R5$)acGets IAM policy for the given row access policy resource. Arguments: bqclient: BigQuery client to use for the request. reference: the RowAccessPolicyReference for the row access policy resource. Returns: The IAM policy attached to the given row access policy resource. Raises: BigqueryTypeError: if reference is not a RowAccessPolicyReference. rE)methodz projects/z /datasets/z/tables/z/rowAccessPolicies/)resource) r typecheckrBrCrrrrGetIAMPolicyApiClientr getIamPolicyr)r r@formatted_resources r rErEs !!:: /             $$&|/|0wy r"N)F))__doc__ __future__rrrtypingrrrgoogle.api_corer clientsr utilsr rMBigqueryClientstrr!r%r*r'boolr1intr:r>r(rFPolicyrErAr"r rhs8&%"" #A(,,(L(3i( (V),,)L)3i) )X ,, L ,,L #s(^*,,L (,,A   #tCy. 4%& #,,#A## # " #  #tCy. #L +,, + 9(#,,#E# ZZ#r"