q dZddlmZddlmZddlmZddlZddlmZddlm Z ddl m Z dd l m Z dd l mZdd lmZddlZe j$Gd d e j&Zddde_y)z2Command for moving organization firewall policies.)absolute_import)division)unicode_literalsN) base_classes)client)base)firewall_policies_utils)flags)logc*eZdZdZdZedZdZy)MovezMove a Compute Engine organization firewall policy. *{command}* is used to move is used to move organization firewall policies to new parent nodes. Nctjdd|_|jj|dtj|y)NTmove)required operation)operation_type)r FirewallPolicyArgumentFIREWALL_POLICY_ARG AddArgument AddArgsMove)clsparsers -lib/surface/compute/firewall_policies/move.pyArgsz Move.Args+sA#::)C''v'F fc tj|j}|jj ||j d}t j||j |j tj|jj}d}|jdrd|jz}|jdrd|jz}|)tjdt!j"t%j&||j)|j }|j+d|| S) NF) with_project)refcompute_client resourcesversion organizationzorganizations/folderzfolders/zIMust specify parent id with --organization=ORGANIZATION or--folder=FOLDER)r")only_generate_requestfp_id parent_id)rComputeApiHolder ReleaseTrackrResolveAsResourcer rOrgFirewallPolicysix text_typelower IsSpecifiedr"r#r errorsysexitr GetFirewallPolicyIdNamer )selfargsholderrorg_firewall_policyr&r%s rRunzMove.Run2s+  * *4+<+<+> ?F  " " 4 4 fU 5 4C 22 }}"" d//1288: < I '"T%6%66i !t{{*i ii"# hhj # 7 7SXXZd6G6G IE  # ##5I $ GGr)__name__ __module__ __qualname____doc__r classmethodrr8rrr r s'  Grr z To move an organization firewall policy under folder with ID ``123456789" to folder ``987654321", run: $ {command} 123456789 --folder=987654321 a To move a firewall policy, the user must have the following permission: *`compute.firewallPolicies.move`. To find predefined roles that contain those permissions, see the [Compute Engine IAM roles](https://cloud.google.com/compute/docs/access/iam). )EXAMPLESzIAM PERMISSIONS)r< __future__rrrr0googlecloudsdk.api_lib.computer0googlecloudsdk.api_lib.compute.firewall_policiesrgooglecloudsdk.callioper4googlecloudsdk.command_lib.compute.firewall_policiesr r googlecloudsdk.corer r+DefaultUniverseOnly UpdateCommandr detailed_helpr>rrrIsh9&' 7C(XF# &G4  &G&GV  r