Struct AuthzSet 

pub struct AuthzSet { /* private fields */ }

The resolved rights of one session: a principal plus the grants that cover it. Every dispatch layer asks the same question: AuthzSet::check.

Implementations

impl AuthzSet

pub fn owner(principal: impl Into<String>) -> Self

The implicit-superuser session: a local open with no principal asserted (root@localhost). Every verb on every namespace.

pub fn restricted(principal: impl Into<String>, grants: Vec<Grant>) -> Self

A restricted session: only what the grants cover. Zero grants = nothing (fail closed).

pub fn principal(&self) -> &str

pub fn is_owner(&self) -> bool

pub fn allows(&self, verb: Verb, ns: &str) -> bool

pub fn check(&self, verb: Verb, ns: &str) -> Result<()>

The one enforcement question. The refusal names the verb, the resource, and the principal — the pieces a granting admin needs. (Once GRANT parses, the message will also spell the statement that fixes it — not before, to avoid pointing at unshipped syntax.)

Trait Implementations

impl Clone for AuthzSet

fn clone(&self) -> AuthzSet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthzSet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.