def SetDatabaseIamPolicy(database_ref, policy): """Sets the IAM policy on a database.""" msgs = apis.GetMessagesModule('spanner', 'v1') policy = iam_util.ParsePolicyFile(policy, msgs.Policy) return databases.SetPolicy(database_ref, policy)
def RemoveDatabaseIamPolicyBinding(database_ref, member, role): """Removes a policy binding from a database IAM policy.""" policy = databases.GetIamPolicy(database_ref) iam_util.RemoveBindingFromIamPolicy(policy, member, role) return databases.SetPolicy(database_ref, policy)
def AddDatabaseIamPolicyBinding(database_ref, member, role): """Adds a policy binding to a database IAM policy.""" msgs = apis.GetMessagesModule('spanner', 'v1') policy = databases.GetIamPolicy(database_ref) iam_util.AddBindingToIamPolicy(msgs, policy, member, role) return databases.SetPolicy(database_ref, policy)