Enum Condition 

pub enum Condition {
    Comparison {
        key: String,
        op: CompareOp,
        value: Literal,
    },
    IsTrue {
        key: String,
    },
    IsFalse {
        key: String,
    },
    Exists {
        key: String,
    },
    InSet {
        value_key: String,
        set_key: String,
        negate: bool,
    },
}

Leaf predicate.

Comparison covers key op value. The truthiness checks are split out (IsTrue / IsFalse) because they’re the most common form — authenticated, role.hr, delegated.

The DSL’s require(...) keyword is not represented here — it’s a rule-level shorthand for “deny when the condition fails,” and the parser desugars it into Not / And / Or over IsFalse expressions plus an Action::Deny. See DSL spec §8.1 desugarings.

Variants

Comparison

Fields

key: String

op: CompareOp

value: Literal

IsTrue

Fields

key: String

IsFalse

Fields

key: String

Exists

DSL exists(key) — true iff the key is present in the AttributeBag, regardless of its value. Distinct from IsTrue (which only succeeds for truthy values). Per DSL §2.2.

Fields

key: String

InSet

DSL value_key in set_key (negate=false) / value_key not in set_key (negate=true). Both operands are attribute keys, not literals — the scalar at value_key is checked for membership in the StringSet at set_key. Per DSL §2.4. Returns false if either key is missing or the types don’t match (scalar must resolve to a string).

Fields

value_key: String

set_key: String

negate: bool

Trait Implementations

impl Clone for Condition

fn clone(&self) -> Condition

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Condition

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Condition

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Condition

fn eq(&self, other: &Condition) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Condition

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Condition