Struct AuthorizationOperations 

pub struct AuthorizationOperations<'a> { /* private fields */ }

Focused authorization operations exposed via AuthFramework::authorization().

Provides role-based access control (RBAC), direct permission grants, and effective-permission queries.

Example

use auth_framework::permissions::{Permission, Role};
use auth_framework::tokens::AuthToken;

let authz = auth.authorization();
let token = AuthToken::builder("token_123", "user_123", "access_token").build();

// Create a role and assign it to a user
let mut editor = Role::new("editor");
editor.add_permission(Permission::new("articles", "edit"));
authz.create_role(editor).await?;
authz.assign_role("user_123", "editor").await?;

// Check permission via token
let allowed = authz.check(&token, "edit", "articles").await?;

Implementations

impl AuthorizationOperations<'_>

pub async fn check( &self, token: &AuthToken, action: &str, resource: &str, ) -> Result<bool>

Check whether a token grants access to an action on a resource.

pub async fn grant( &self, user_id: &str, action: &str, resource: &str, ) -> Result<()>

Grant a direct permission to a user.

pub async fn revoke( &self, user_id: &str, action: &str, resource: &str, ) -> Result<()>

Revoke a direct permission from a user.

pub async fn create_role(&self, role: Role) -> Result<()>

Create a role.

pub async fn list_roles(&self) -> Vec<Role>

List all defined roles.

pub async fn role(&self, role_name: &str) -> Result<Role>

Fetch a role definition by name.

pub async fn add_role_permission( &self, role_name: &str, permission: Permission, ) -> Result<()>

Add a permission to an existing role.

pub async fn assign_role(&self, user_id: &str, role_name: &str) -> Result<()>

Assign a role to a user.

pub async fn remove_role(&self, user_id: &str, role_name: &str) -> Result<()>

Remove a role from a user.

pub async fn has_role(&self, user_id: &str, role_name: &str) -> Result<bool>

Check whether a user currently has a role.

pub async fn effective_permissions(&self, user_id: &str) -> Result<Permissions>

List effective permissions for a user.

pub async fn roles_for_user(&self, user_id: &str) -> Result<Roles>

List the currently assigned runtime roles for a user.