Struct Grant 

pub struct Grant {
    pub target: GrantTarget,
    pub level: PermissionLevel,
    pub expires: Option<Instant>,
}

A permission grant combining a target and permission level.

Grants are the core building blocks of the permission system. Each grant specifies:

• What can be accessed (the target)
• What level of access is permitted (the level)
• When the grant expires (optional)

Fields

target: GrantTarget

What this grant applies to (path, domain, or command).

level: PermissionLevel

The permission level granted.

expires: Option<Instant>

Optional expiration time. If None, grant lasts for the session.

Implementations

impl Grant

pub fn new(target: GrantTarget, level: PermissionLevel) -> Self

Creates a new grant with the given target and level.

The grant has no expiration (session-scoped).

pub fn with_expiration( target: GrantTarget, level: PermissionLevel, expires: Instant, ) -> Self

Creates a new grant with an expiration time.

pub fn read_path(path: impl Into<PathBuf>, recursive: bool) -> Self

Creates a read grant for a path.

pub fn write_path(path: impl Into<PathBuf>, recursive: bool) -> Self

Creates a write grant for a path.

pub fn execute_path(path: impl Into<PathBuf>, recursive: bool) -> Self

Creates an execute grant for a path.

pub fn admin_path(path: impl Into<PathBuf>, recursive: bool) -> Self

Creates an admin grant for a path.

pub fn domain(pattern: impl Into<String>, level: PermissionLevel) -> Self

Creates a grant for a network domain.

pub fn command(pattern: impl Into<String>, level: PermissionLevel) -> Self

Creates a grant for a shell command pattern.

pub fn satisfies(&self, request: &PermissionRequest) -> bool

Checks if this grant satisfies a permission request.

A grant satisfies a request if:

1. The grant’s target covers the request’s target
2. The grant’s level satisfies the request’s required level
3. The grant has not expired

Arguments

• request - The permission request to check against

Returns

true if this grant satisfies the request

pub fn is_expired(&self) -> bool

Checks if this grant has expired.

pub fn description(&self) -> String

Returns a display-friendly description of this grant.

Trait Implementations

impl Clone for Grant

fn clone(&self) -> Grant

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Grant

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Grant

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Grant

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Grant

fn eq(&self, other: &Grant) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Grant

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Grant

impl StructuralPartialEq for Grant