Struct AdminOperations 

pub struct AdminOperations<'a> { /* private fields */ }

Focused advanced administration operations exposed from AuthFramework::admin.

These operations go beyond the everyday AuthorizationOperations surface and cover ABAC policy management, permission delegation, role inheritance, resource registration, and attribute-based access control.

Implementations

impl AdminOperations<'_>

pub async fn set_role_inheritance( &self, child_role: &str, parent_role: &str, ) -> Result<()>

Define a parent–child role inheritance relationship.

pub async fn create_abac_policy( &self, name: &str, description: &str, ) -> Result<()>

Create an ABAC policy.

pub async fn map_user_attribute( &self, user_id: &str, attribute: &str, value: &str, ) -> Result<()>

Map a user attribute used in ABAC policy evaluation.

pub async fn set_user_attributes( &self, user_id: &str, attributes: &[(&str, &str)], ) -> Result<()>

Set multiple user attributes in one call.

This is a convenience wrapper around map_user_attribute for setting several ABAC attributes at once.

Example

auth.admin().set_user_attributes("user-1", &[
    ("department", "engineering"),
    ("clearance", "top-secret"),
    ("location", "us-west-2"),
]).await?;

pub async fn get_user_attribute( &self, user_id: &str, attribute: &str, ) -> Result<Option<String>>

Get a user attribute value.

pub async fn check_dynamic_permission( &self, user_id: &str, action: &str, resource: &str, context: HashMap<String, String>, ) -> Result<bool>

Check a permission using dynamic ABAC context evaluation.

Prefer check_dynamic_permission_with_context with a PermissionContext for a more readable API.

pub async fn check_dynamic_permission_with_context( &self, user_id: &str, action: &str, resource: &str, context: PermissionContext, ) -> Result<bool>

Check a permission using dynamic ABAC context evaluation with a PermissionContext.

Example

use auth_framework::auth_operations::PermissionContext;

let ctx = PermissionContext::new()
    .with_attribute("ip_location", "office")
    .with_attribute("device_type", "trusted");

let allowed = auth.admin()
    .check_dynamic_permission_with_context("user_123", "read", "docs", ctx)
    .await?;

pub async fn create_resource(&self, resource: &str) -> Result<()>

Register a resource in the permission system.

pub async fn delegate(&self, req: DelegationRequest) -> Result<()>

Delegate a permission from one user to another using a DelegationRequest.

Example

auth.admin()
    .delegate(
        DelegationRequest::new("admin_1", "user_2", "write", "reports")
            .duration(Duration::from_secs(3600))
    )
    .await?;

pub async fn delegate_permission( &self, delegator_id: &str, delegatee_id: &str, action: &str, resource: &str, duration: Duration, ) -> Result<()>

Delegate a permission from one user to another for a limited duration.

Prefer delegate with a DelegationRequest for better readability.

pub async fn active_delegations(&self, user_id: &str) -> Result<Vec<String>>

List currently active permission delegations for a user.