Enum AdminRole 

pub enum AdminRole {
    Viewer,
    Operator,
    Admin,
}

What a web-admin operator’s live sessions are allowed to do.

A privilege tier, not an authentication state (that is admin_sessions.state and the pending_mfa / active split). Stored in admin_users.role as one of the AdminRole::as_str spellings, with NULL read as Admin – an operator created before the column existed keeps the authority they had, and so does the bootstrap operator, who is the only way into the panel.

Variants are declared low privilege to high, so role >= AdminRole::Operator is the gate the write extractors run (crates/admin/src/webadmin/session.rs).

Variants

Viewer

Reads every page and API route; may still act on their own account (password, sessions, second factor, logout). Refused every shared or CA mutation.

Operator

Viewer, plus every CA mutation: revoke a certificate, deactivate or delete an ACME account, delete an order, mint or revoke EAB credentials, run a nonce sweep. Refused the colleague-management surface.

Admin

Operator, plus /operators/* – disabling or re-enabling a colleague, resetting their second factor, revoking one of their sessions. Everything.

Implementations

impl AdminRole

pub const ALL: &'static [Self]

Every value, low privilege to high – the order the variants are declared in, and the one an error message lists them in.

pub fn as_str(self) -> &'static str

The exact string stored in admin_users.role.

pub fn from_storage(raw: Option<&str>) -> Self

Reads the column back. Infallible: NULL and "admin" are Admin, and anything unrecognised is Viewer – the least-privilege direction, the same fail-closed choice AdminUser::is_active makes for a status outside its CHECK. A garbage value can only arrive by a hand-edit of the database; every write path here goes through a canonical AdminRole::as_str.

Trait Implementations

impl Clone for AdminRole

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AdminRole

impl Debug for AdminRole

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for AdminRole

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AdminRole

impl FromStr for AdminRole

fn from_str(value: &str) -> Result<Self, Self::Err>

For operator input (admin user create --role, admin user role). An unknown value is refused by name listing the alternatives – the --status / --event rule, since a silent fallback would be a privilege decision made by a typo.

type Err = String

The associated error which can be returned from parsing.

impl Hash for AdminRole

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for AdminRole

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

fn clamp_to<R>(self, range: R) -> Self

where Self: Sized, R: ClampBounds<Self>,

🔬This is a nightly-only experimental API. (clamp_to)

Restrict a value to a certain range.

impl PartialEq for AdminRole

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for AdminRole

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for AdminRole