Struct SecurityConfig 

pub struct SecurityConfig {
    pub level: SecurityLevel,
    pub workspace_only: bool,
    pub max_actions_per_hour: u32,
    pub forbidden_paths: Vec<String>,
    pub allowed_roots: Vec<PathBuf>,
    pub forbidden_extensions: Vec<String>,
    pub read_only: Option<bool>,
    pub max_file_size: u64,
    pub allow_symlinks: bool,
}

Security policy configuration

Fields

level: SecurityLevel

Security level preset

workspace_only: bool

Whether to restrict operations to workspace only

max_actions_per_hour: u32

Maximum file operations per hour

forbidden_paths: Vec<String>

Forbidden path prefixes

allowed_roots: Vec<PathBuf>

Additional allowed roots outside workspace

forbidden_extensions: Vec<String>

Forbidden file extensions

read_only: Option<bool>

Read-only mode (overrides level setting)

max_file_size: u64

Maximum file size in bytes (0 = unlimited)

allow_symlinks: bool

Enable symlink following

Implementations

impl SecurityConfig

pub fn from_level(level: SecurityLevel) -> Self

Create config from security level

pub fn is_read_only(&self) -> bool

Check if read-only mode is enabled

pub fn validate(&self) -> Result<(), String>

Validate the configuration

pub fn merge(&mut self, other: SecurityConfig)

Merge with another config (other takes precedence for non-default values)

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

where SecurityConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.