Skip to main content

IntegratedPermissionManager

aster::permission::integration

Struct IntegratedPermissionManager 

Source 
pub struct IntegratedPermissionManager { /* private fields */ }
Expand description

Integrated Permission Manager

Combines the new ToolPermissionManager with the existing PermissionManager and ToolPermissionStore to provide a unified permission checking interface.

Requirements: 11.1, 11.2

Implementations§

Source§

impl IntegratedPermissionManager

Source

pub fn new(config_dir: Option<PathBuf>) -> Self

Create a new IntegratedPermissionManager

§Arguments
  • config_dir - Optional configuration directory for the new permission system
§Returns

A new IntegratedPermissionManager instance

Requirements: 11.1

Source

pub fn with_legacy_manager( config_dir: Option<PathBuf>, legacy_manager: Arc<Mutex<PermissionManager>>, ) -> Self

Create with existing PermissionManager

§Arguments
  • config_dir - Optional configuration directory
  • legacy_manager - Reference to existing PermissionManager

Requirements: 11.1

Source

pub fn with_legacy_systems( config_dir: Option<PathBuf>, legacy_manager: Arc<Mutex<PermissionManager>>, legacy_store: Arc<Mutex<ToolPermissionStore>>, ) -> Self

Create with existing PermissionManager and ToolPermissionStore

§Arguments
  • config_dir - Optional configuration directory
  • legacy_manager - Reference to existing PermissionManager
  • legacy_store - Reference to existing ToolPermissionStore

Requirements: 11.1, 11.2

Source

pub fn set_check_legacy_first(&mut self, check_first: bool)

Set whether to check legacy systems first

When true (default), the legacy PermissionManager is checked before the new ToolPermissionManager. This ensures backward compatibility.

Source

pub fn tool_permission_manager(&self) -> &ToolPermissionManager

Get a reference to the underlying ToolPermissionManager

Source

pub fn tool_permission_manager_mut(&mut self) -> &mut ToolPermissionManager

Get a mutable reference to the underlying ToolPermissionManager

Source

pub async fn is_allowed( &self, tool: &str, params: &HashMap<String, Value>, context: &PermissionContext, ) -> PermissionResult

Check if a tool is allowed to execute

This method integrates both the legacy and new permission systems:

  1. If check_legacy_first is true, check the legacy PermissionManager first
  2. If legacy returns a definitive answer (AlwaysAllow or NeverAllow), use it
  3. Otherwise, fall back to the new ToolPermissionManager
§Arguments
  • tool - The tool name to check
  • params - The tool parameters
  • context - The permission context
§Returns

A PermissionResult containing the decision and details

Requirements: 11.1

Source

pub async fn check_legacy_store( &self, tool_request: &ToolRequest, ) -> Option<bool>

Check permission for a tool request using the legacy store

§Arguments
  • tool_request - The tool request to check
§Returns

Some(bool) if the legacy store has a cached decision, None otherwise

Requirements: 11.2

Source

pub async fn record_legacy_permission( &self, tool_request: &ToolRequest, allowed: bool, expiry_duration: Option<Duration>, ) -> Result<()>

Record a permission decision in the legacy store

§Arguments
  • tool_request - The tool request
  • allowed - Whether the tool was allowed
  • expiry_duration - Optional expiry duration

Requirements: 11.2

Source

pub async fn check_permission_comprehensive( &self, tool: &str, tool_request: Option<&ToolRequest>, params: &HashMap<String, Value>, context: &PermissionContext, ) -> PermissionResult

Check permission using both legacy store and new system

This method provides a comprehensive permission check that:

  1. Checks the legacy ToolPermissionStore for cached decisions
  2. Falls back to the legacy PermissionManager
  3. Finally checks the new ToolPermissionManager
§Arguments
  • tool - The tool name
  • tool_request - Optional tool request for store lookup
  • params - The tool parameters
  • context - The permission context
§Returns

A PermissionResult containing the decision and details

Requirements: 11.1, 11.2

Source

pub fn set_legacy_store(&mut self, store: Arc<Mutex<ToolPermissionStore>>)

Sync permissions from legacy store to new system

This method is useful for migration scenarios where you want to import existing cached permissions into the new system.

Note: This is a one-way sync and doesn’t modify the legacy store.

Requirements: 11.2, 11.5

Source

pub fn set_legacy_manager(&mut self, manager: Arc<Mutex<PermissionManager>>)

Set the legacy permission manager

Requirements: 11.1

Source

pub fn has_legacy_systems(&self) -> bool

Check if legacy systems are configured

Source

pub fn legacy_permission_manager( &self, ) -> Option<&Arc<Mutex<PermissionManager>>>

Get reference to legacy permission manager if set

Source

pub fn legacy_permission_store( &self, ) -> Option<&Arc<Mutex<ToolPermissionStore>>>

Get reference to legacy permission store if set

Trait Implementations§

Source§

impl Default for IntegratedPermissionManager

Source§

fn default() -> Self

Returns the “default value” for a type. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> Conv for T

Source§

fn conv<T>(self) -> T
where Self: Into<T>,

Converts self into T using Into<T>. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> FutureExt for T

Source§

fn with_context(self, otel_cx: Context) -> WithContext<Self>

Attaches the provided Context to this type, returning a WithContext wrapper. Read more
Source§

fn with_current_context(self) -> WithContext<Self>

Attaches the current Context to this type, returning a WithContext wrapper. Read more
Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> IntoEither for T

Source§

fn into_either(self, into_left: bool) -> Either<Self, Self>

Converts self into a Left variant of Either<Self, Self> if into_left is true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

Converts self into a Left variant of Either<Self, Self> if into_left(&self) returns true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

impl<T> IntoRequest<T> for T

Source§

fn into_request(self) -> Request<T>

Wrap the input message T in a tonic::Request
Source§

impl<Unshared, Shared> IntoShared<Shared> for Unshared
where Shared: FromUnshared<Unshared>,

Source§

fn into_shared(self) -> Shared

Creates a shared type from an unshared type.
Source§

impl<T> Pipe for T
where T: ?Sized,

Source§

fn pipe<R>(self, func: impl FnOnce(Self) -> R) -> R
where Self: Sized,

Pipes by value. This is generally the method you want to use. Read more
Source§

fn pipe_ref<'a, R>(&'a self, func: impl FnOnce(&'a Self) -> R) -> R
where R: 'a,

Borrows self and passes that borrow into the pipe function. Read more
Source§

fn pipe_ref_mut<'a, R>(&'a mut self, func: impl FnOnce(&'a mut Self) -> R) -> R
where R: 'a,

Mutably borrows self and passes that borrow into the pipe function. Read more
Source§

fn pipe_borrow<'a, B, R>(&'a self, func: impl FnOnce(&'a B) -> R) -> R
where Self: Borrow<B>, B: 'a + ?Sized, R: 'a,

Borrows self, then passes self.borrow() into the pipe function. Read more
Source§

fn pipe_borrow_mut<'a, B, R>( &'a mut self, func: impl FnOnce(&'a mut B) -> R, ) -> R
where Self: BorrowMut<B>, B: 'a + ?Sized, R: 'a,

Mutably borrows self, then passes self.borrow_mut() into the pipe function. Read more
Source§

fn pipe_as_ref<'a, U, R>(&'a self, func: impl FnOnce(&'a U) -> R) -> R
where Self: AsRef<U>, U: 'a + ?Sized, R: 'a,

Borrows self, then passes self.as_ref() into the pipe function.
Source§

fn pipe_as_mut<'a, U, R>(&'a mut self, func: impl FnOnce(&'a mut U) -> R) -> R
where Self: AsMut<U>, U: 'a + ?Sized, R: 'a,

Mutably borrows self, then passes self.as_mut() into the pipe function.
Source§

fn pipe_deref<'a, T, R>(&'a self, func: impl FnOnce(&'a T) -> R) -> R
where Self: Deref<Target = T>, T: 'a + ?Sized, R: 'a,

Borrows self, then passes self.deref() into the pipe function.
Source§

fn pipe_deref_mut<'a, T, R>( &'a mut self, func: impl FnOnce(&'a mut T) -> R, ) -> R
where Self: DerefMut<Target = T> + Deref, T: 'a + ?Sized, R: 'a,

Mutably borrows self, then passes self.deref_mut() into the pipe function.
Source§

impl<T> Pointable for T

Source§

const ALIGN: usize

The alignment of pointer.
Source§

type Init = T

The type for initializers.
Source§

unsafe fn init(init: <T as Pointable>::Init) -> usize

Initializes a with the given initializer. Read more
Source§

unsafe fn deref<'a>(ptr: usize) -> &'a T

Dereferences the given pointer. Read more
Source§

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

Mutably dereferences the given pointer. Read more
Source§

unsafe fn drop(ptr: usize)

Drops the object pointed to by the given pointer. Read more
Source§

impl<T> PolicyExt for T
where T: ?Sized,

Source§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow only if self and other return Action::Follow. Read more
Source§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow if either self or other returns Action::Follow. Read more
Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T> Tap for T

Source§

fn tap(self, func: impl FnOnce(&Self)) -> Self

Immutable access to a value. Read more
Source§

fn tap_mut(self, func: impl FnOnce(&mut Self)) -> Self

Mutable access to a value. Read more
Source§

fn tap_borrow<B>(self, func: impl FnOnce(&B)) -> Self
where Self: Borrow<B>, B: ?Sized,

Immutable access to the Borrow<B> of a value. Read more
Source§

fn tap_borrow_mut<B>(self, func: impl FnOnce(&mut B)) -> Self
where Self: BorrowMut<B>, B: ?Sized,

Mutable access to the BorrowMut<B> of a value. Read more
Source§

fn tap_ref<R>(self, func: impl FnOnce(&R)) -> Self
where Self: AsRef<R>, R: ?Sized,

Immutable access to the AsRef<R> view of a value. Read more
Source§

fn tap_ref_mut<R>(self, func: impl FnOnce(&mut R)) -> Self
where Self: AsMut<R>, R: ?Sized,

Mutable access to the AsMut<R> view of a value. Read more
Source§

fn tap_deref<T>(self, func: impl FnOnce(&T)) -> Self
where Self: Deref<Target = T>, T: ?Sized,

Immutable access to the Deref::Target of a value. Read more
Source§

fn tap_deref_mut<T>(self, func: impl FnOnce(&mut T)) -> Self
where Self: DerefMut<Target = T> + Deref, T: ?Sized,

Mutable access to the Deref::Target of a value. Read more
Source§

fn tap_dbg(self, func: impl FnOnce(&Self)) -> Self

Calls .tap() only in debug builds, and is erased in release builds.
Source§

fn tap_mut_dbg(self, func: impl FnOnce(&mut Self)) -> Self

Calls .tap_mut() only in debug builds, and is erased in release builds.
Source§

fn tap_borrow_dbg<B>(self, func: impl FnOnce(&B)) -> Self
where Self: Borrow<B>, B: ?Sized,

Calls .tap_borrow() only in debug builds, and is erased in release builds.
Source§

fn tap_borrow_mut_dbg<B>(self, func: impl FnOnce(&mut B)) -> Self
where Self: BorrowMut<B>, B: ?Sized,

Calls .tap_borrow_mut() only in debug builds, and is erased in release builds.
Source§

fn tap_ref_dbg<R>(self, func: impl FnOnce(&R)) -> Self
where Self: AsRef<R>, R: ?Sized,

Calls .tap_ref() only in debug builds, and is erased in release builds.
Source§

fn tap_ref_mut_dbg<R>(self, func: impl FnOnce(&mut R)) -> Self
where Self: AsMut<R>, R: ?Sized,

Calls .tap_ref_mut() only in debug builds, and is erased in release builds.
Source§

fn tap_deref_dbg<T>(self, func: impl FnOnce(&T)) -> Self
where Self: Deref<Target = T>, T: ?Sized,

Calls .tap_deref() only in debug builds, and is erased in release builds.
Source§

fn tap_deref_mut_dbg<T>(self, func: impl FnOnce(&mut T)) -> Self
where Self: DerefMut<Target = T> + Deref, T: ?Sized,

Calls .tap_deref_mut() only in debug builds, and is erased in release builds.
Source§

impl<T> TryConv for T

Source§

fn try_conv<T>(self) -> Result<T, Self::Error>
where Self: TryInto<T>,

Attempts to convert self into T using TryInto<T>. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

impl<T> ErasedDestructor for T
where T: 'static,