Delete ACLs Run in API Explorer
Delete all ACLs that match the filter criteria. The filter.
query string parameters find matching ACLs that meet all specified conditions.
Query parameters
-
The type of resource (topic, consumer group, etc.) this ACL targets.
Values are
RESOURCE_TYPE_ANY
,RESOURCE_TYPE_TOPIC
,RESOURCE_TYPE_GROUP
,RESOURCE_TYPE_CLUSTER
,RESOURCE_TYPE_TRANSACTIONAL_ID
,RESOURCE_TYPE_DELEGATION_TOKEN
, orRESOURCE_TYPE_USER
. -
The name of the resource this ACL targets.
-
The pattern to use for matching the specified resource_name (any, exact match, literal, or prefixed).
Values are
RESOURCE_PATTERN_TYPE_ANY
,RESOURCE_PATTERN_TYPE_MATCH
,RESOURCE_PATTERN_TYPE_LITERAL
, orRESOURCE_PATTERN_TYPE_PREFIXED
. -
The user for whom this ACL applies. With the Kafka simple authorizer, you must include the prefix "User:" with the user name.
-
The host address to use for this ACL. To allow a principal access from multiple hosts, you must create an ACL for each host.
-
The operation that is allowed or denied (e.g. READ).
Values are
OPERATION_ANY
,OPERATION_ALL
,OPERATION_READ
,OPERATION_WRITE
,OPERATION_CREATE
,OPERATION_DELETE
,OPERATION_ALTER
,OPERATION_DESCRIBE
,OPERATION_CLUSTER_ACTION
,OPERATION_DESCRIBE_CONFIGS
,OPERATION_ALTER_CONFIGS
,OPERATION_IDEMPOTENT_WRITE
,OPERATION_CREATE_TOKENS
, orOPERATION_DESCRIBE_TOKENS
. -
Whether the operation should be allowed or denied.
Values are
PERMISSION_TYPE_ANY
,PERMISSION_TYPE_DENY
, orPERMISSION_TYPE_ALLOW
.
Responses
-
OK
Hide response attribute Show response attribute object
-
Hide matching_acls attributes Show matching_acls attributes object
-
The
Status
type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. EachStatus
message contains three pieces of data: error code, error message, and error details.You can find out more about this error model and how to work with it in the API Design Guide.
Hide error attributes Show error attributes object
-
RPC status code, as described here.
Values are
OK
,CANCELLED
,UNKNOWN
,INVALID_ARGUMENT
,DEADLINE_EXCEEDED
,NOT_FOUND
,ALREADY_EXISTS
,PERMISSION_DENIED
,UNAUTHENTICATED
,RESOURCE_EXHAUSTED
,FAILED_PRECONDITION
,ABORTED
,OUT_OF_RANGE
,UNIMPLEMENTED
,INTERNAL
,UNAVAILABLE
, orDATA_LOSS
. -
A list of messages that carries the error details.
Details of the error.
Details of the error.
One of: Describes violations in a client request. This error type focuses on the syntactic aspects of the request.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.BadRequest
. -
Describes all violations in a client request.
A message type used to describe a single bad request field.
Hide field_violations attributes Show field_violations attributes object
-
A description of why the request element is bad.
-
A path that leads to a field in the request body. The value will be a sequence of dot-separated identifiers that identify a protocol buffer field.
Consider the following:
message CreateContactRequest { message EmailAddress { enum Type { TYPE_UNSPECIFIED = 0; HOME = 1; WORK = 2; }
optional string email = 1; repeated EmailType type = 2; }
string full_name = 1; repeated EmailAddress email_addresses = 2; }
In this example, in proto
field
could take one of the following values:full_name
for a violation in thefull_name
valueemail_addresses[1].email
for a violation in theemail
field of the firstemail_addresses
messageemail_addresses[3].type[2]
for a violation in the secondtype
value in the thirdemail_addresses
message.
In JSON, the same values are represented as:
fullName
for a violation in thefullName
valueemailAddresses[1].email
for a violation in theemail
field of the firstemailAddresses
messageemailAddresses[3].type[2]
for a violation in the secondtype
value in the thirdemailAddresses
message.
-
Describes the cause of the error with structured details.
Example of an error when contacting the "pubsub.googleapis.com" API when it is not enabled:
{ "reason": "API_DISABLED" "domain": "googleapis.com" "metadata": { "resource": "projects/123", "service": "pubsub.googleapis.com" } }
This response indicates that the pubsub.googleapis.com API is not enabled.
Example of an error that is returned when attempting to create a Spanner instance in a region that is out of stock:
{ "reason": "STOCKOUT" "domain": "spanner.googleapis.com", "metadata": { "availableRegions": "us-central1,us-east2" } }
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.ErrorInfo
. -
The logical grouping to which the "reason" belongs. The error domain is typically the registered service name of the tool or product that generates the error. Example: "pubsub.googleapis.com". If the error is generated by some common infrastructure, the error domain must be a globally unique value that identifies the infrastructure. For Google API infrastructure, the error domain is "googleapis.com".
-
Additional structured details about this error.
Keys should match /[a-zA-Z0-9-_]/ and be limited to 64 characters in length. When identifying the current value of an exceeded limit, the units should be contained in the key, not the value. For example, rather than {"instanceLimit": "100/request"}, should be returned as, {"instanceLimitPerRequest": "100"}, if the client exceeds the number of instances that can be created in a single (batch) request.
-
The reason of the error. This is a constant value that identifies the proximate cause of the error. Error reasons are unique within a particular domain of errors. This should be at most 63 characters and match a regular expression of
[A-Z][A-Z0-9_]+[A-Z0-9]
, which represents UPPER_SNAKE_CASE.
Describes how a quota check failed.
For example if a daily limit was exceeded for the calling project, a service could respond with a QuotaFailure detail containing the project id and the description of the quota limit that was exceeded. If the calling project hasn't enabled the service in the developer console, then a service could respond with the project id and set
service_disabled
to true.Also see RetryInfo and Help types for other details about handling a quota failure.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.QuotaFailure
. -
Describes all quota violations.
A message type used to describe a single quota violation. For example, a daily quota or a custom quota that was exceeded.
Hide violations attributes Show violations attributes object
-
A description of how the quota check failed. Clients can use this description to find more about the quota configuration in the service's public documentation, or find the relevant quota limit to adjust through developer console.
For example: "Service disabled" or "Daily Limit for read operations exceeded".
-
The subject on which the quota check failed. For example, "clientip:" or "project:".
-
Provides links to documentation or for performing an out of band action.
For example, if a quota check failed with an error indicating the calling project hasn't enabled the accessed service, this can contain a URL pointing directly to the right place in the developer console to flip the bit.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.Help
. -
URL(s) pointing to additional information on handling the current error.
Describes a URL link.
-
-
Detailed error message. No compatibility guarantees are given for the text contained in this message.
-
-
The host address to use for this ACL.
-
The operation that is allowed or denied (e.g. READ).
Values are
OPERATION_ANY
,OPERATION_ALL
,OPERATION_READ
,OPERATION_WRITE
,OPERATION_CREATE
,OPERATION_DELETE
,OPERATION_ALTER
,OPERATION_DESCRIBE
,OPERATION_CLUSTER_ACTION
,OPERATION_DESCRIBE_CONFIGS
,OPERATION_ALTER_CONFIGS
,OPERATION_IDEMPOTENT_WRITE
,OPERATION_CREATE_TOKENS
, orOPERATION_DESCRIBE_TOKENS
. -
Whether the operation should be allowed or denied.
Values are
PERMISSION_TYPE_ANY
,PERMISSION_TYPE_DENY
, orPERMISSION_TYPE_ALLOW
. -
The user for whom this ACL applies.
-
The name of the resource this ACL targets.
-
The pattern to use for matching the specified resource_name (any, exact match, literal, or prefixed).
Values are
RESOURCE_PATTERN_TYPE_ANY
,RESOURCE_PATTERN_TYPE_MATCH
,RESOURCE_PATTERN_TYPE_LITERAL
, orRESOURCE_PATTERN_TYPE_PREFIXED
. -
The type of resource (topic, consumer group, etc.) this ACL targets.
Values are
RESOURCE_TYPE_ANY
,RESOURCE_TYPE_TOPIC
,RESOURCE_TYPE_GROUP
,RESOURCE_TYPE_CLUSTER
,RESOURCE_TYPE_TRANSACTIONAL_ID
,RESOURCE_TYPE_DELEGATION_TOKEN
, orRESOURCE_TYPE_USER
.
-
-
-
Unauthenticated.
Hide response attributes Show response attributes object
-
RPC status code, as described here.
Values are
OK
,CANCELLED
,UNKNOWN
,INVALID_ARGUMENT
,DEADLINE_EXCEEDED
,NOT_FOUND
,ALREADY_EXISTS
,PERMISSION_DENIED
,UNAUTHENTICATED
,RESOURCE_EXHAUSTED
,FAILED_PRECONDITION
,ABORTED
,OUT_OF_RANGE
,UNIMPLEMENTED
,INTERNAL
,UNAVAILABLE
, orDATA_LOSS
. -
A list of messages that carries the error details.
Details of the error.
Details of the error.
One of: Describes violations in a client request. This error type focuses on the syntactic aspects of the request.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.BadRequest
. -
Describes all violations in a client request.
A message type used to describe a single bad request field.
Hide field_violations attributes Show field_violations attributes object
-
A description of why the request element is bad.
-
A path that leads to a field in the request body. The value will be a sequence of dot-separated identifiers that identify a protocol buffer field.
Consider the following:
message CreateContactRequest { message EmailAddress { enum Type { TYPE_UNSPECIFIED = 0; HOME = 1; WORK = 2; }
optional string email = 1; repeated EmailType type = 2; }
string full_name = 1; repeated EmailAddress email_addresses = 2; }
In this example, in proto
field
could take one of the following values:full_name
for a violation in thefull_name
valueemail_addresses[1].email
for a violation in theemail
field of the firstemail_addresses
messageemail_addresses[3].type[2]
for a violation in the secondtype
value in the thirdemail_addresses
message.
In JSON, the same values are represented as:
fullName
for a violation in thefullName
valueemailAddresses[1].email
for a violation in theemail
field of the firstemailAddresses
messageemailAddresses[3].type[2]
for a violation in the secondtype
value in the thirdemailAddresses
message.
-
Describes the cause of the error with structured details.
Example of an error when contacting the "pubsub.googleapis.com" API when it is not enabled:
{ "reason": "API_DISABLED" "domain": "googleapis.com" "metadata": { "resource": "projects/123", "service": "pubsub.googleapis.com" } }
This response indicates that the pubsub.googleapis.com API is not enabled.
Example of an error that is returned when attempting to create a Spanner instance in a region that is out of stock:
{ "reason": "STOCKOUT" "domain": "spanner.googleapis.com", "metadata": { "availableRegions": "us-central1,us-east2" } }
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.ErrorInfo
. -
The logical grouping to which the "reason" belongs. The error domain is typically the registered service name of the tool or product that generates the error. Example: "pubsub.googleapis.com". If the error is generated by some common infrastructure, the error domain must be a globally unique value that identifies the infrastructure. For Google API infrastructure, the error domain is "googleapis.com".
-
Additional structured details about this error.
Keys should match /[a-zA-Z0-9-_]/ and be limited to 64 characters in length. When identifying the current value of an exceeded limit, the units should be contained in the key, not the value. For example, rather than {"instanceLimit": "100/request"}, should be returned as, {"instanceLimitPerRequest": "100"}, if the client exceeds the number of instances that can be created in a single (batch) request.
-
The reason of the error. This is a constant value that identifies the proximate cause of the error. Error reasons are unique within a particular domain of errors. This should be at most 63 characters and match a regular expression of
[A-Z][A-Z0-9_]+[A-Z0-9]
, which represents UPPER_SNAKE_CASE.
Describes how a quota check failed.
For example if a daily limit was exceeded for the calling project, a service could respond with a QuotaFailure detail containing the project id and the description of the quota limit that was exceeded. If the calling project hasn't enabled the service in the developer console, then a service could respond with the project id and set
service_disabled
to true.Also see RetryInfo and Help types for other details about handling a quota failure.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.QuotaFailure
. -
Describes all quota violations.
A message type used to describe a single quota violation. For example, a daily quota or a custom quota that was exceeded.
Hide violations attributes Show violations attributes object
-
A description of how the quota check failed. Clients can use this description to find more about the quota configuration in the service's public documentation, or find the relevant quota limit to adjust through developer console.
For example: "Service disabled" or "Daily Limit for read operations exceeded".
-
The subject on which the quota check failed. For example, "clientip:" or "project:".
-
Provides links to documentation or for performing an out of band action.
For example, if a quota check failed with an error indicating the calling project hasn't enabled the accessed service, this can contain a URL pointing directly to the right place in the developer console to flip the bit.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.Help
. -
URL(s) pointing to additional information on handling the current error.
Describes a URL link.
-
-
Detailed error message. No compatibility guarantees are given for the text contained in this message.
-
-
Internal Server Error. Reach out to support.
Hide response attributes Show response attributes object
-
RPC status code, as described here.
Values are
OK
,CANCELLED
,UNKNOWN
,INVALID_ARGUMENT
,DEADLINE_EXCEEDED
,NOT_FOUND
,ALREADY_EXISTS
,PERMISSION_DENIED
,UNAUTHENTICATED
,RESOURCE_EXHAUSTED
,FAILED_PRECONDITION
,ABORTED
,OUT_OF_RANGE
,UNIMPLEMENTED
,INTERNAL
,UNAVAILABLE
, orDATA_LOSS
. -
A list of messages that carries the error details.
Details of the error.
Details of the error.
One of: Describes violations in a client request. This error type focuses on the syntactic aspects of the request.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.BadRequest
. -
Describes all violations in a client request.
A message type used to describe a single bad request field.
Hide field_violations attributes Show field_violations attributes object
-
A description of why the request element is bad.
-
A path that leads to a field in the request body. The value will be a sequence of dot-separated identifiers that identify a protocol buffer field.
Consider the following:
message CreateContactRequest { message EmailAddress { enum Type { TYPE_UNSPECIFIED = 0; HOME = 1; WORK = 2; }
optional string email = 1; repeated EmailType type = 2; }
string full_name = 1; repeated EmailAddress email_addresses = 2; }
In this example, in proto
field
could take one of the following values:full_name
for a violation in thefull_name
valueemail_addresses[1].email
for a violation in theemail
field of the firstemail_addresses
messageemail_addresses[3].type[2]
for a violation in the secondtype
value in the thirdemail_addresses
message.
In JSON, the same values are represented as:
fullName
for a violation in thefullName
valueemailAddresses[1].email
for a violation in theemail
field of the firstemailAddresses
messageemailAddresses[3].type[2]
for a violation in the secondtype
value in the thirdemailAddresses
message.
-
Describes the cause of the error with structured details.
Example of an error when contacting the "pubsub.googleapis.com" API when it is not enabled:
{ "reason": "API_DISABLED" "domain": "googleapis.com" "metadata": { "resource": "projects/123", "service": "pubsub.googleapis.com" } }
This response indicates that the pubsub.googleapis.com API is not enabled.
Example of an error that is returned when attempting to create a Spanner instance in a region that is out of stock:
{ "reason": "STOCKOUT" "domain": "spanner.googleapis.com", "metadata": { "availableRegions": "us-central1,us-east2" } }
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.ErrorInfo
. -
The logical grouping to which the "reason" belongs. The error domain is typically the registered service name of the tool or product that generates the error. Example: "pubsub.googleapis.com". If the error is generated by some common infrastructure, the error domain must be a globally unique value that identifies the infrastructure. For Google API infrastructure, the error domain is "googleapis.com".
-
Additional structured details about this error.
Keys should match /[a-zA-Z0-9-_]/ and be limited to 64 characters in length. When identifying the current value of an exceeded limit, the units should be contained in the key, not the value. For example, rather than {"instanceLimit": "100/request"}, should be returned as, {"instanceLimitPerRequest": "100"}, if the client exceeds the number of instances that can be created in a single (batch) request.
-
The reason of the error. This is a constant value that identifies the proximate cause of the error. Error reasons are unique within a particular domain of errors. This should be at most 63 characters and match a regular expression of
[A-Z][A-Z0-9_]+[A-Z0-9]
, which represents UPPER_SNAKE_CASE.
Describes how a quota check failed.
For example if a daily limit was exceeded for the calling project, a service could respond with a QuotaFailure detail containing the project id and the description of the quota limit that was exceeded. If the calling project hasn't enabled the service in the developer console, then a service could respond with the project id and set
service_disabled
to true.Also see RetryInfo and Help types for other details about handling a quota failure.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.QuotaFailure
. -
Describes all quota violations.
A message type used to describe a single quota violation. For example, a daily quota or a custom quota that was exceeded.
Hide violations attributes Show violations attributes object
-
A description of how the quota check failed. Clients can use this description to find more about the quota configuration in the service's public documentation, or find the relevant quota limit to adjust through developer console.
For example: "Service disabled" or "Daily Limit for read operations exceeded".
-
The subject on which the quota check failed. For example, "clientip:" or "project:".
-
Provides links to documentation or for performing an out of band action.
For example, if a quota check failed with an error indicating the calling project hasn't enabled the accessed service, this can contain a URL pointing directly to the right place in the developer console to flip the bit.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.Help
. -
URL(s) pointing to additional information on handling the current error.
Describes a URL link.
-
-
Detailed error message. No compatibility guarantees are given for the text contained in this message.
-
-
An unexpected error response.
Hide response attributes Show response attributes object
-
RPC status code, as described here.
Values are
OK
,CANCELLED
,UNKNOWN
,INVALID_ARGUMENT
,DEADLINE_EXCEEDED
,NOT_FOUND
,ALREADY_EXISTS
,PERMISSION_DENIED
,UNAUTHENTICATED
,RESOURCE_EXHAUSTED
,FAILED_PRECONDITION
,ABORTED
,OUT_OF_RANGE
,UNIMPLEMENTED
,INTERNAL
,UNAVAILABLE
, orDATA_LOSS
. -
A list of messages that carries the error details.
Details of the error.
Details of the error.
One of: Describes violations in a client request. This error type focuses on the syntactic aspects of the request.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.BadRequest
. -
Describes all violations in a client request.
A message type used to describe a single bad request field.
Hide field_violations attributes Show field_violations attributes object
-
A description of why the request element is bad.
-
A path that leads to a field in the request body. The value will be a sequence of dot-separated identifiers that identify a protocol buffer field.
Consider the following:
message CreateContactRequest { message EmailAddress { enum Type { TYPE_UNSPECIFIED = 0; HOME = 1; WORK = 2; }
optional string email = 1; repeated EmailType type = 2; }
string full_name = 1; repeated EmailAddress email_addresses = 2; }
In this example, in proto
field
could take one of the following values:full_name
for a violation in thefull_name
valueemail_addresses[1].email
for a violation in theemail
field of the firstemail_addresses
messageemail_addresses[3].type[2]
for a violation in the secondtype
value in the thirdemail_addresses
message.
In JSON, the same values are represented as:
fullName
for a violation in thefullName
valueemailAddresses[1].email
for a violation in theemail
field of the firstemailAddresses
messageemailAddresses[3].type[2]
for a violation in the secondtype
value in the thirdemailAddresses
message.
-
Describes the cause of the error with structured details.
Example of an error when contacting the "pubsub.googleapis.com" API when it is not enabled:
{ "reason": "API_DISABLED" "domain": "googleapis.com" "metadata": { "resource": "projects/123", "service": "pubsub.googleapis.com" } }
This response indicates that the pubsub.googleapis.com API is not enabled.
Example of an error that is returned when attempting to create a Spanner instance in a region that is out of stock:
{ "reason": "STOCKOUT" "domain": "spanner.googleapis.com", "metadata": { "availableRegions": "us-central1,us-east2" } }
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.ErrorInfo
. -
The logical grouping to which the "reason" belongs. The error domain is typically the registered service name of the tool or product that generates the error. Example: "pubsub.googleapis.com". If the error is generated by some common infrastructure, the error domain must be a globally unique value that identifies the infrastructure. For Google API infrastructure, the error domain is "googleapis.com".
-
Additional structured details about this error.
Keys should match /[a-zA-Z0-9-_]/ and be limited to 64 characters in length. When identifying the current value of an exceeded limit, the units should be contained in the key, not the value. For example, rather than {"instanceLimit": "100/request"}, should be returned as, {"instanceLimitPerRequest": "100"}, if the client exceeds the number of instances that can be created in a single (batch) request.
-
The reason of the error. This is a constant value that identifies the proximate cause of the error. Error reasons are unique within a particular domain of errors. This should be at most 63 characters and match a regular expression of
[A-Z][A-Z0-9_]+[A-Z0-9]
, which represents UPPER_SNAKE_CASE.
Describes how a quota check failed.
For example if a daily limit was exceeded for the calling project, a service could respond with a QuotaFailure detail containing the project id and the description of the quota limit that was exceeded. If the calling project hasn't enabled the service in the developer console, then a service could respond with the project id and set
service_disabled
to true.Also see RetryInfo and Help types for other details about handling a quota failure.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.QuotaFailure
. -
Describes all quota violations.
A message type used to describe a single quota violation. For example, a daily quota or a custom quota that was exceeded.
Hide violations attributes Show violations attributes object
-
A description of how the quota check failed. Clients can use this description to find more about the quota configuration in the service's public documentation, or find the relevant quota limit to adjust through developer console.
For example: "Service disabled" or "Daily Limit for read operations exceeded".
-
The subject on which the quota check failed. For example, "clientip:" or "project:".
-
Provides links to documentation or for performing an out of band action.
For example, if a quota check failed with an error indicating the calling project hasn't enabled the accessed service, this can contain a URL pointing directly to the right place in the developer console to flip the bit.
Hide attributes Show attributes
-
Fully qualified protobuf type name of the underlying response, prefixed with
type.googleapis.com/
.Value is
type.googleapis.com/google.rpc.Help
. -
URL(s) pointing to additional information on handling the current error.
Describes a URL link.
-
-
Detailed error message. No compatibility guarantees are given for the text contained in this message.
-
curl \
--request DELETE 'https://{dataplane_api_subdomain}.cloud.redpanda.com/v1/acls?filter.resource_type=RESOURCE_TYPE_ANY&filter.resource_pattern_type=RESOURCE_PATTERN_TYPE_ANY&filter.operation=OPERATION_ANY&filter.permission_type=PERMISSION_TYPE_ANY' \
--header "Authorization: Bearer $ACCESS_TOKEN"
{
"matching_acls": [
{
"error": {
"code": "OK",
"details": [
{
"@type": "type.googleapis.com/google.rpc.BadRequest",
"field_violations": [
{
"description": "string",
"field": "string"
}
]
}
],
"message": "string"
},
"host": "string",
"operation": "OPERATION_ANY",
"permission_type": "PERMISSION_TYPE_ANY",
"principal": "string",
"resource_name": "string",
"resource_pattern_type": "RESOURCE_PATTERN_TYPE_ANY",
"resource_type": "RESOURCE_TYPE_ANY"
}
]
}
{
"code": "OK",
"details": [
{
"@type": "type.googleapis.com/google.rpc.BadRequest",
"field_violations": [
{
"description": "string",
"field": "string"
}
]
}
],
"message": "string"
}
{
"code": "OK",
"details": [
{
"@type": "type.googleapis.com/google.rpc.BadRequest",
"field_violations": [
{
"description": "string",
"field": "string"
}
]
}
],
"message": "string"
}
{
"code": "OK",
"details": [
{
"@type": "type.googleapis.com/google.rpc.BadRequest",
"field_violations": [
{
"description": "string",
"field": "string"
}
]
}
],
"message": "string"
}