Enum SecurityPolicy 

pub enum SecurityPolicy {
    ReadOnly,
    ReadWrite {
        writable_records: HashSet<String>,
    },
}

Security policy for remote access

Defines which operations are permitted and for which records.

Variants

ReadOnly

Read-only access (list, get, subscribe)

This is the default and recommended policy for most deployments. No write operations are permitted.

ReadWrite

Read-write access with explicit per-record opt-in

Write operations (record.set) are only allowed for records whose RecordKey is in the writable_records set.

Fields

writable_records: HashSet<String>

Set of RecordKeys that allow write operations

Implementations

impl SecurityPolicy

pub fn read_only() -> Self

Creates a read-only policy

pub fn read_write() -> Self

Creates a read-write policy with no writable records initially

pub fn allow_write_key(&mut self, key: impl Into<String>)

Adds a record key to the writable set

Only has effect for ReadWrite policies. Panics if policy is ReadOnly.

pub fn with_writable_key(self, key: impl Into<String>) -> Self

Adds a record key to the writable set (builder pattern)

Panics

Panics if called on a ReadOnly policy

pub fn is_writable_key(&self, key: &str) -> bool

Checks if a record key is writable

pub fn permissions(&self) -> &[&str]

Returns the list of granted permissions

pub fn writable_records(&self) -> Vec<String>

Returns the list of writable record keys (for ReadWrite policy)

pub fn writable_record_keys(&self) -> Vec<StringKey>

Returns the list of writable record keys as StringKeys

Trait Implementations

impl Clone for SecurityPolicy

fn clone(&self) -> SecurityPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.