// Copyright 2025 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

// @generated by protoc-gen-connect-es v1.6.1
// @generated from file google/iam/v1/iam_policy.proto (package google.iam.v1, syntax proto3)
/* eslint-disable */
// @ts-nocheck

import { GetIamPolicyRequest, SetIamPolicyRequest, TestIamPermissionsRequest, TestIamPermissionsResponse } from "./iam_policy_pb.js";
import { Policy } from "./policy_pb.js";
import { MethodKind } from "@bufbuild/protobuf";

/**
 * API Overview
 *
 * Manages Identity and Access Management (IAM) policies.
 *
 * Any implementation of an API that offers access control features
 * implements the google.iam.v1.IAMPolicy interface.
 *
 * ## Data model
 *
 * Access control is applied when a principal (user or service account), takes
 * some action on a resource exposed by a service. Resources, identified by
 * URI-like names, are the unit of access control specification. Service
 * implementations can choose the granularity of access control and the
 * supported permissions for their resources.
 * For example one database service may allow access control to be
 * specified only at the Table level, whereas another might allow access control
 * to also be specified at the Column level.
 *
 * ## Policy Structure
 *
 * See google.iam.v1.Policy
 *
 * This is intentionally not a CRUD style API because access control policies
 * are created and deleted implicitly with the resources to which they are
 * attached.
 *
 * @generated from service google.iam.v1.IAMPolicy
 */
export declare const IAMPolicy: {
  readonly typeName: "google.iam.v1.IAMPolicy",
  readonly methods: {
    /**
     * Sets the access control policy on the specified resource. Replaces any
     * existing policy.
     *
     * Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
     *
     * @generated from rpc google.iam.v1.IAMPolicy.SetIamPolicy
     */
    readonly setIamPolicy: {
      readonly name: "SetIamPolicy",
      readonly I: typeof SetIamPolicyRequest,
      readonly O: typeof Policy,
      readonly kind: MethodKind.Unary,
    },
    /**
     * Gets the access control policy for a resource.
     * Returns an empty policy if the resource exists and does not have a policy
     * set.
     *
     * @generated from rpc google.iam.v1.IAMPolicy.GetIamPolicy
     */
    readonly getIamPolicy: {
      readonly name: "GetIamPolicy",
      readonly I: typeof GetIamPolicyRequest,
      readonly O: typeof Policy,
      readonly kind: MethodKind.Unary,
    },
    /**
     * Returns permissions that a caller has on the specified resource.
     * If the resource does not exist, this will return an empty set of
     * permissions, not a `NOT_FOUND` error.
     *
     * Note: This operation is designed to be used for building permission-aware
     * UIs and command-line tools, not for authorization checking. This operation
     * may "fail open" without warning.
     *
     * @generated from rpc google.iam.v1.IAMPolicy.TestIamPermissions
     */
    readonly testIamPermissions: {
      readonly name: "TestIamPermissions",
      readonly I: typeof TestIamPermissionsRequest,
      readonly O: typeof TestIamPermissionsResponse,
      readonly kind: MethodKind.Unary,
    },
  }
};