A single access control entry (ACE): one trustee, whether its rights are allowed or denied, and the rights themselves. A trustee that has both allowed and denied rights is represented as two ACEs.

Implements

Constructors

Properties

accessControlType?: AccessControlType

Whether the ACE grants (Allow) or denies (Deny) the listed rights.

inheritedFrom?: string

When inherited, a description of where the ACE was inherited from. Output only.

isInherited?: boolean

True when this ACE is inherited from an ancestor. Read-only — inherited ACEs are returned by GET but are ignored on input (the set operation manages explicit ACEs only).

rights?: EntryRight[]

The rights granted or denied by this ACE.

How the ACE propagates to descendant entries. Defaults to All when omitted on input.

trustee?: TrusteeIdentity

The trustee this ACE applies to. On input, identify the trustee by either trustee.sid or trustee.accountName (the SID takes precedence when both are given).

Methods