// Copyright 2020 Make.TV Inc.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

syntax = "proto3";

package tv.make.api;

option go_package = "git.ltnglobal.com/make.tv/genproto/api;api";

import "google/protobuf/timestamp.proto";

message Role {
  // The unique identifier of the role.
  string id = 1;

  // The unique identifier of the owning team.
  string team_id = 2;

  // The display name of the role.
  string display_name = 3;

  // The description of the role.
  string description = 4;

  // When has this role been created.
  //
  // Output only.
  google.protobuf.Timestamp create_time = 5;

  // When has this role been modified.
  //
  // Output only.
  google.protobuf.Timestamp update_time = 6;

  // The user who created this role.
  //
  // Output only.
  string creator_id = 7;

  // The resource labels.
  map<string, string> labels = 8;

  // Set of attached policies.
  //
  // Not populated for the ListRoles request.
  //
  // See also: AddPolicyToRole, RemovePolicyFromRole
  //
  // Output only. 
  repeated string policy_ids = 9;

  // Set of attached users.
  //
  // Not populated for the ListRoles request.
  //
  // See also: AddUserToRole, RemoveUserFromRole
  //
  //
  // Output only.
  repeated string user_ids = 10;

  // Set of attached clients.
  //
  // Not populated for the ListRoles request.
  //
  // See also: AddClientToRole, RemoveClientFromRole
  //
  // Output only. 
  repeated string client_ids = 11;

  // Whether or not the role can be modified.
  //
  // Clients can not set this field. Default roles are created read-only by the system.
  //
  // [Output-Only]
  bool read_only = 13;
}