Struct SecurityContext 

pub struct SecurityContext { /* private fields */ }

Security context entity for managing access control and security policies.

The SecurityContext encapsulates all security-related information needed for pipeline processing operations. It enforces access control policies, maintains audit information, and integrates with encryption key management.

Security Features

• Permission Management: Fine-grained access control
• Security Classification: Hierarchical data sensitivity levels
• Session Tracking: Unique session identification for audit trails
• Key Integration: Encryption key management and association
• Audit Support: Comprehensive logging and tracking capabilities
• Policy Validation: Enforcement of security requirements and constraints

Usage Examples

Creating a Basic Security Context

Creating Context with Specific Permissions

Managing Permissions Dynamically

Security Level Validation

Encryption Key Management

Creating Restricted Contexts

Audit and Session Management

Implementations

impl SecurityContext

pub fn new(user_id: Option<String>, security_level: SecurityLevel) -> Self

Creates a new security context

pub fn with_permissions( user_id: Option<String>, permissions: Vec<Permission>, security_level: SecurityLevel, ) -> Self

Creates a security context with permissions

pub fn user_id(&self) -> Option<&str>

Gets the user ID

pub fn session_id(&self) -> Uuid

Gets the session ID

pub fn permissions(&self) -> &[Permission]

Gets the permissions

pub fn encryption_key_id(&self) -> Option<&str>

Gets the encryption key ID

pub fn integrity_required(&self) -> bool

Checks if integrity is required

pub fn audit_enabled(&self) -> bool

Checks if audit is enabled

pub fn security_level(&self) -> &SecurityLevel

Gets the security level

pub fn metadata(&self) -> &HashMap<String, String>

Gets the metadata

pub fn created_at(&self) -> DateTime<Utc>

Gets the creation timestamp

pub fn set_user_id(&mut self, user_id: Option<String>)

Sets the user ID

pub fn add_permission(&mut self, permission: Permission)

Adds a permission

pub fn remove_permission(&mut self, permission: &Permission)

Removes a permission

pub fn set_encryption_key_id(&mut self, key_id: Option<String>)

Sets the encryption key ID

pub fn set_integrity_required(&mut self, required: bool)

Sets integrity requirement

pub fn set_audit_enabled(&mut self, enabled: bool)

Sets audit enablement

pub fn set_security_level(&mut self, level: SecurityLevel)

Sets the security level

pub fn add_metadata(&mut self, key: String, value: String)

Adds metadata

pub fn remove_metadata(&mut self, key: &str)

Removes metadata

pub fn has_permission(&self, permission: &Permission) -> bool

Checks if the context has a specific permission

pub fn can_encrypt(&self) -> bool

Checks if the context can perform encryption

pub fn can_decrypt(&self) -> bool

Checks if the context can perform decryption

pub fn can_compress(&self) -> bool

Checks if the context can perform compression

pub fn can_decompress(&self) -> bool

Checks if the context can perform decompression

pub fn can_read(&self) -> bool

Checks if the context can read

pub fn can_write(&self) -> bool

Checks if the context can write

pub fn can_execute(&self) -> bool

Checks if the context can execute

pub fn meets_security_level(&self, minimum_level: &SecurityLevel) -> bool

Checks if the security level meets the minimum requirement

pub fn restrict(&self, allowed_permissions: Vec<Permission>) -> Self

Creates a restricted copy of the security context

pub fn validate(&self) -> Result<(), PipelineError>

Validates the security context

Trait Implementations

impl Clone for SecurityContext

fn clone(&self) -> SecurityContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityContext

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.