Struct AuthzEngine 

pub struct AuthzEngine { /* private fields */ }

Implementations

impl AuthzEngine

pub fn new() -> Self

pub fn add_policy(&mut self, policy: impl Policy)

pub async fn enforce( &self, action: &str, identity: &Identity, resource_id: Option<&str>, ) -> Result<()>

Enforces authorization. Raises AuthError::Forbidden if denied.

Evaluation order:

1. Walk policies in registration order.
2. First explicit Allow → permit.
3. First explicit Deny → reject.
4. All Abstain → fall through to RBAC check.

Trait Implementations

impl Default for AuthzEngine

fn default() -> Self

Returns the “default value” for a type.