# io.k8s.api.authorization.v1.SubjectAccessReviewSpec

From **Kubernetes**.

SubjectAccessReviewSpec is a description of the access request.  Exactly one of resourceAttributes and nonResourceAttributes must be set

- Type: `object`

## Properties

### `extra`

- Required: false
- Type: `object`

extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.

### `groups`

- Required: false
- Type: `array`

groups is the groups you're testing for.

### `nonResourceAttributes`

- Required: false
nonResourceAttributes describes information for a non-resource access request

### `resourceAttributes`

- Required: false
resourceAttributes describes information for a resource access request

### `uid`

- Required: false
- Type: `string`

uid information about the requesting user.

### `user`

- Required: false
- Type: `string`

user is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups

## JSON Schema

```json
{"description":"SubjectAccessReviewSpec is a description of the access request.  Exactly one of resourceAttributes and nonResourceAttributes must be set","properties":{"extra":{"additionalProperties":{"items":{"type":"string"},"type":"array"},"description":"extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.","type":"object"},"groups":{"description":"groups is the groups you're testing for.","items":{"type":"string"},"type":"array","x-kubernetes-list-type":"atomic"},"nonResourceAttributes":{"allOf":[{"$ref":"#/components/schemas/io.k8s.api.authorization.v1.NonResourceAttributes"}],"description":"nonResourceAttributes describes information for a non-resource access request"},"resourceAttributes":{"allOf":[{"$ref":"#/components/schemas/io.k8s.api.authorization.v1.ResourceAttributes"}],"description":"resourceAttributes describes information for a resource access request"},"uid":{"description":"uid information about the requesting user.","type":"string"},"user":{"description":"user is the user you're testing for. If you specify \"User\" but not \"Groups\", then is it interpreted as \"What if User were not a member of any groups","type":"string"}},"type":"object"}
```