Struct AuthorizationService 

pub struct AuthorizationService<S = MemoryStorage>
where
    S: Storage + Send + Sync,
{
    pub role_system: AsyncRoleSystem<S>,
    /* private fields */
}

Enhanced authorization service providing enterprise-grade RBAC

Fields

role_system: AsyncRoleSystem<S>

The async role system from role-system v1.0

Implementations

impl AuthorizationService<MemoryStorage>

pub async fn new() -> Result<Self>

Create a new authorization service with default configuration

pub async fn with_config(config: AuthorizationConfig) -> Result<Self>

Create a new authorization service with custom configuration

impl<S> AuthorizationService<S>

where S: Storage + Send + Sync + Default,

pub async fn with_storage( storage: S, config: AuthorizationConfig, ) -> Result<Self>

Create authorization service with custom storage

pub async fn check_permission( &self, user_id: &str, action: &str, resource_type: &str, context: Option<&HashMap<String, String>>, ) -> Result<bool>

Check if a user has permission to perform an action on a resource

pub async fn check_api_permission( &self, user_id: &str, method: &str, endpoint: &str, context: &HashMap<String, String>, ) -> Result<bool>

Check API endpoint permission

pub async fn assign_role(&self, user_id: &str, role_name: &str) -> Result<()>

Assign a role to a user

pub async fn remove_role(&self, user_id: &str, role_name: &str) -> Result<()>

Remove a role from a user

pub async fn elevate_role( &self, user_id: &str, role_name: &str, duration_seconds: Option<u64>, ) -> Result<()>

Temporarily elevate a user’s role

pub async fn get_user_roles(&self, user_id: &str) -> Result<Vec<String>>

Get all roles assigned to a user

pub async fn create_role( &self, name: &str, description: &str, permissions: Vec<Permission>, parent_roles: Option<Vec<String>>, ) -> Result<()>

Create a new role

pub async fn get_role_hierarchy(&self, role_id: &str) -> Result<Vec<String>>

Get role hierarchy (using new role-system v1.1.1 features)

pub async fn get_role_metadata(&self, role_id: &str) -> Result<String>

Test role hierarchy metadata access

pub async fn delete_role(&self, _name: &str) -> Result<()>

Delete a role

pub async fn get_role(&self, name: &str) -> Result<Option<Role>>

Get role by name

pub async fn batch_check_permissions( &self, user_id: &str, checks: &[(String, String)], ) -> Result<Vec<(String, String, bool)>>

Batch check multiple permissions