Enum SecurityPolicy 

pub enum SecurityPolicy {
    ReadOnly,
    ReadWrite {
        writable_records: HashSet<TypeId>,
    },
}

Security policy for remote access

Defines which operations are permitted and for which records.

Variants

ReadOnly

Read-only access (list, get, subscribe)

This is the default and recommended policy for most deployments. No write operations are permitted.

ReadWrite

Read-write access with explicit per-record opt-in

Write operations (record.set) are only allowed for records whose TypeId is in the writable_records set.

Fields

writable_records: HashSet<TypeId>

Set of TypeIds that allow write operations

Implementations

impl SecurityPolicy

pub fn read_only() -> Self

Creates a read-only policy

pub fn read_write() -> Self

Creates a read-write policy with no writable records initially

pub fn allow_write<T: 'static>(&mut self)

Adds a record type to the writable set

Only has effect for ReadWrite policies. Panics if policy is ReadOnly.

pub fn is_writable(&self, type_id: TypeId) -> bool

Checks if a record type is writable

pub fn permissions(&self) -> &[&str]

Returns the list of granted permissions

pub fn writable_records(&self) -> Vec<TypeId>

Returns the list of writable record TypeIds (for ReadWrite policy)

impl SecurityPolicy

Builder helper for SecurityPolicy with chained API

pub fn with_writable_record<T: 'static>(self) -> Self

Builder pattern: Creates ReadWrite policy and allows write for a type

Trait Implementations

impl Clone for SecurityPolicy

fn clone(&self) -> SecurityPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.