Package google.registry.model.console

Class User

java.lang.Object

google.registry.model.ImmutableObject

google.registry.model.UpdateAutoTimestampEntity

google.registry.model.console.User

All Implemented Interfaces:

Buildable, UnsafeSerializable, Serializable, Cloneable

@Embeddable
@Entity
public class User
extends UpdateAutoTimestampEntity
implements Buildable

A console user, either a registry employee or a registrar partner.

See Also:

• Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	User.Builder<T extends User,B extends User.Builder<T,B>>	Builder for constructing immutable User objects.

Nested classes/interfaces inherited from class google.registry.model.ImmutableObject

ImmutableObject.DoNotHydrate, ImmutableObject.IgnoredInDiffableMap, ImmutableObject.Insignificant

Nested classes/interfaces inherited from interface google.registry.model.Buildable

Buildable.GenericBuilder<S,B extends Buildable.GenericBuilder<?,?>>, Buildable.Overlayable<T>

Field Summary

Fields

Modifier and Type	Field	Description
static final String	IAP_SECURED_WEB_APP_USER_ROLE

Fields inherited from class google.registry.model.ImmutableObject

hashCode

Constructor Summary

Constructors

Constructor	Description
User()

Method Summary

Modifier and Type	Method	Description
User.Builder<? extends User,?>	asBuilder()
String	getEmailAddress()
Optional<String>	getRegistryLockEmailAddress()
UserRoles	getUserRoles()
static void	grantIapPermission(String emailAddress, Optional<String> groupEmailAddress, CloudTasksUtils cloudTasksUtils, ServiceConnection connection, IamClient iamClient)	Grants the user permission to pass IAP.
boolean	hasAnyRegistryLockPermission()	Whether the user has the registry lock permission on any registrar or globally.
boolean	hasRegistryLockPassword()
static void	revokeIapPermission(String emailAddress, Optional<String> groupEmailAddress, CloudTasksUtils cloudTasksUtils, ServiceConnection connection, IamClient iamClient)	Revoke the user's permission to pass IAP.
boolean	verifyRegistryLockPassword(String registryLockPassword)

Methods inherited from class google.registry.model.UpdateAutoTimestampEntity

copyUpdateTimestamp, getUpdateTimestamp, resetUpdateTimestamp, setUpdateTimestamp

Methods inherited from class google.registry.model.ImmutableObject

clone, cloneEmptyToNull, createVKey, equals, getSignificantFields, hashCode, toDiffableFieldMap, toHydratedString, toString, toStringHelper

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Details

IAP_SECURED_WEB_APP_USER_ROLE

public static final String IAP_SECURED_WEB_APP_USER_ROLE

See Also:

• Constant Field Values

Constructor Details

User

public User()

Method Details

grantIapPermission

public static void grantIapPermission(String emailAddress,
 Optional<String> groupEmailAddress,
 @Nullable
 CloudTasksUtils cloudTasksUtils,
 @Nullable
 ServiceConnection connection,
 IamClient iamClient)

Grants the user permission to pass IAP.

Depending on if a console user group is set up, the permission is granted either individually or via group membership.

revokeIapPermission

public static void revokeIapPermission(String emailAddress,
 Optional<String> groupEmailAddress,
 @Nullable
 CloudTasksUtils cloudTasksUtils,
 @Nullable
 ServiceConnection connection,
 IamClient iamClient)

Revoke the user's permission to pass IAP.

Depending on if a console user group is set up, the permission is revoked either individually or via group membership.

getEmailAddress

public String getEmailAddress()

getRegistryLockEmailAddress

public Optional<String> getRegistryLockEmailAddress()

getUserRoles

public UserRoles getUserRoles()

hasRegistryLockPassword

public boolean hasRegistryLockPassword()

verifyRegistryLockPassword

public boolean verifyRegistryLockPassword(String registryLockPassword)

hasAnyRegistryLockPermission

public boolean hasAnyRegistryLockPermission()

Whether the user has the registry lock permission on any registrar or globally.

If so, they should be allowed to (re)set their registry lock password.

asBuilder

public User.Builder<? extends User,?> asBuilder()

Specified by:

asBuilder in interface Buildable