* @return the error message
     */
    String message() default "{jakarta.validation.constraints.Size.message}";

    /**
     * The validation groups this constraint belongs to.
     * @return the groups
     */
    Class<?>[] groups() default {};

    /**
     * The payload associated with this constraint.
     * @return the payload
     */
    Class<? extends Payload>[] payload() default {};

		if _, ok = eclaims[policy.SessionPolicyName]; ok {
			owner = false
		} else {
			owner = globalActiveCred.AccessKey == ucred.ParentUser
		}

		groups = ucred.Groups
	}

	return claims, groups, owner, nil
}

// newCachedAuthToken returns the cached token.
func newCachedAuthToken() func() string {
	return func() string {
		return globalNodeAuthToken
	}

        if (opLambda != null) {
            opLambda.callback(builder);
        }
    }

    public void setGroups_Regexp(String groups) {
        setGroups_Regexp(groups, null);
    }

    public void setGroups_Regexp(String groups, ConditionOptionCall<RegexpQueryBuilder> opLambda) {
        RegexpQueryBuilder builder = regRegexpQ("groups", groups);

	if _, ok := args["groups"]; !ok {
		if len(groups) > 0 {
			args["groups"] = groups
		}
	}

	return args
}

// PolicyToBucketAccessPolicy converts a MinIO policy into a minio-go policy data structure.
func PolicyToBucketAccessPolicy(bucketPolicy *policy.BucketPolicy) (*miniogopolicy.BucketAccessPolicy, error) {

,"Resource":["arn:aws:s3:::*"]}]}} iam-assets/users.json {} iam-assets/groups.json {} iam-assets/svcaccts.json {"dillon-service-2":{"parent":"oCnAoSQFtdVQtKwrB73j","accessKey":"dillon-service-2","secretKey":"dillon-service-2","groups":null,"claims":{"accessKey":"dillon-service-2","at_hash":"LL4jvrkBRNQhOKiC83RL","aud":"minio-client-app","c_hash":"fjGB4ldChsaf9vSFdZ1P","email":"******@****.***","email_verified":true,"groups":["projecta","projectb"],"iat":1726558680,"iss":"http://127.0.0.1:5556/dex","name":"Dillon...

            "type" : "keyword"
          },
          "gidNumber" : {
            "type" : "long"
          },
          "givenName" : {
            "type" : "keyword"
          },
          "groups" : {
            "type" : "keyword"
          },
          "homeDirectory" : {
            "type" : "keyword"
          },
          "homePhone" : {
            "type" : "keyword"
          },

     *
     * @return the error message
     */
    String message() default "{org.lastaflute.validator.constraints.UriType.message}";

    /**
     * The validation groups.
     *
     * @return the validation groups
     */
    Class<?>[] groups() default {};

    /**
     * The payload for constraint.
     *
     * @return the payload
     */
    Class<? extends Payload>[] payload() default {};

import org.dbflute.util.DfTypeUtil;

/**
 * @author FreeGen
 */
public class UserBhv extends BsUserBhv {

    private static final String ROLES = "roles";
    private static final String GROUPS = "groups";
    private static final String PASSWORD = "password";
    private static final String NAME = "name";

    private String indexName = null;

    @Override
    protected String asEsIndex() {

     */
    public Map<String, String> attributes = new HashMap<>();

    /**
     * The roles assigned to the user.
     */
    public String[] roles;

    /**
     * The groups assigned to the user.
     */
    public String[] groups;

    /**
     * Initializes the form with default values for creating a new user.
     */
    public void initialize() {
        crudMode = CrudMode.CREATE;
    }

		return
	}

	// Empty DN list and not self, list access keys for all users
	if isAll {
		if !globalIAMSys.IsAllowed(policy.Args{
			AccountName:     cred.AccessKey,
			Groups:          cred.Groups,
			Action:          policy.ListUsersAdminAction,
			ConditionValues: getConditionValues(r, "", cred),
			IsOwner:         owner,
			Claims:          cred.Claims,
		}) {