java - 如何查询 PubSub 项目主题/特定主题的 pubsub.topics.list 权限

Question

我想检查运行代码是否有权在特定项目中执行“pubsub.topics.list”。这段代码:

try (TopicAdminClient admin = getTopicAdmin()) {
    List<String> existing = admin.testIamPermissions("projects/my-proj/topics/my-topic",       
      Collections.singletonList("pubsub.topics.list")).getPermissionsList();
}

抛出 io.grpc.StatusRuntimeException:INVALID_ARGUMENT:权限 pubsub.topics.list 对此资源无效。

当我将 "projects/my-proj/topics/my-topic" 替换为 "projects/my-proj/topics" 或 "projects/我的项目”

它抛出:io.grpc.StatusRuntimeException: INVALID_ARGUMENT: Invalid resource name given，来自 docs看起来唯一有效的资源名称是 "projects/my-proj/topics/my-topic"和 "projects/my-proj/subscriptions/my-sub"

测试 pubsub.topics.list 权限的正确方法是什么？

Answer 1

根据 https://cloud.google.com/pubsub/docs/access-control#tbl_perm , pubsub.topics.list 是对 Cloud 项目的权限。 Cloud Pub/Sub 服务不管理 Cloud 项目的权限。相反，资源管理器服务管理云项目的权限。参见 https://cloud.google.com/resource-manager/docs/access-control-proj和 https://cloud.google.com/iam/docs/testing-permissions .