Struct StandingAuthority 

pub struct StandingAuthority {
    pub id: AuthorityId,
    pub holder: Holder,
    pub basis: String,
    pub ceiling: Spend,
    pub max_draws: Option<u32>,
    pub expires_at: Option<Timestamp>,
}

What somebody authorized, and how far it goes.

Issued once and thereafter immutable: the ceiling a person agreed to must not be editable under them, or the record of what they agreed to is worth nothing. Changing a ceiling means revoking this authority and issuing another, which leaves both on the record.

Fields

id: AuthorityId

holder: Holder

On whose behalf it may be drawn: the principal a run must act for.

A run acting under a delegation chain holds as the chain’s owner, the person it descends from; a run the plane started for itself with no chain holds as its tenant; a served caller that presented no chain holds nothing — see holder_of. Without it, knowing an id would be enough: any run in the tenant could spend a mandate somebody else signed, and an id a peer supplied could name one.

basis: String

Why this exists, in the issuer’s terms — an approval reference, a mandate id, a ticket.

Required, and required to be non-empty. An authority with no stated basis is a ceiling nobody can trace to a decision, which is the thing an audit asks for first.

ceiling: Spend

The total this authority is good for, across every draw.

max_draws: Option<u32>

How many draws it permits, if the issuer bounded that too.

Separate from the ceiling because they bound different abuses: a spend ceiling stops one large wrong charge, a draw count stops a thousand small ones that never reach it.

expires_at: Option<Timestamp>

When it stops being drawable, if it expires.

Evaluated against the run’s journaled clock, never an ambient one, so a replay reaches the same verdict as the live run did.

Implementations

impl StandingAuthority

pub fn new( id: impl Into<String>, holder: Holder, basis: impl Into<String>, ceiling: Spend, ) -> Self

Issue an authority for ceiling to holder, stating why it exists.

pub const fn max_draws(self, n: u32) -> Self

Bound how many times it may be drawn on.

pub const fn expires_at(self, at: Timestamp) -> Self

Stop it being drawable after at.

pub fn validate(&self) -> Result<(), AuthorityError>

Whether the declaration is well formed.

Errors

AuthorityError::Malformed for an empty id, holder or basis, or a ceiling of nothing. A zero ceiling is refused rather than treated as unlimited: the two readings are opposite, and a format that guesses between them is one whose meaning changes under you.

Trait Implementations

impl Clone for StandingAuthority

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StandingAuthority

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for StandingAuthority

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for StandingAuthority

impl PartialEq for StandingAuthority

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for StandingAuthority

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for StandingAuthority