List Google Analytics subproperties in access reviews
listProperties filtered properties with parent:accounts/{id}, which returns
only properties whose direct parent is the account and silently drops
subproperties and roll-up properties (parented to another property). A member
holding a binding only on such a subproperty was omitted from the review.
Switch to the ancestor:accounts/{id} filter, which walks the whole account
hierarchy and is a strict superset, so no property is lost.
Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
This commit is contained in:
@@ -45,13 +45,13 @@ interactions:
|
||||
host: analyticsadmin.googleapis.com
|
||||
form:
|
||||
filter:
|
||||
- parent:accounts/123456
|
||||
- ancestor:accounts/123456
|
||||
pageSize:
|
||||
- "200"
|
||||
headers:
|
||||
Accept:
|
||||
- application/json
|
||||
url: https://analyticsadmin.googleapis.com/v1alpha/properties?filter=parent%3Aaccounts%2F123456&pageSize=200
|
||||
url: https://analyticsadmin.googleapis.com/v1alpha/properties?filter=ancestor%3Aaccounts%2F123456&pageSize=200
|
||||
method: GET
|
||||
response:
|
||||
proto: HTTP/2.0
|
||||
|
||||
Reference in New Issue
Block a user