Struct AdminService 

pub struct AdminService<S> { /* private fields */ }

Admin service — privileged operations.

Callers are responsible for verifying that the acting identity has admin privileges before calling any method.

Implementations

impl<S> AdminService<S>

where S: UserRepository + SessionRepository + OrgRepository + AuditLogRepository + Clone + Send + Sync + 'static,

pub fn new(storage: S, events: EventBus, session_ttl_secs: i64) -> Self

pub fn storage(&self) -> &S

Internal accessor used by the dashboard for advanced admin operations.

pub fn events(&self) -> &EventBus

Access the event bus for emitting audit events.

pub async fn list_users(&self, offset: u32, limit: u32) -> Result<Vec<User>>

Paginated list of all users ordered by created_at.

pub async fn get_user(&self, user_id: Uuid) -> Result<User>

Look up any user by id.

pub async fn create_user(&self, admin_id: Uuid, email: String) -> Result<User>

Create a user directly (admin provisioning). Does not require an email-password credential.

pub async fn set_role( &self, admin_id: Uuid, org_id: Uuid, user_id: Uuid, role_id: Uuid, ) -> Result<Membership>

Assign a role to an org member.

pub async fn ban_user( &self, admin_id: Uuid, user_id: Uuid, reason: &str, ) -> Result<()>

Soft-ban a user by marking metadata {"banned": true}.

pub async fn unban_user(&self, admin_id: Uuid, user_id: Uuid) -> Result<()>

Lift a ban.

pub async fn ban_status(&self, user_id: Uuid) -> Result<BanStatus>

pub async fn impersonate( &self, admin_id: Uuid, target_id: Uuid, admin_ip: &str, ) -> Result<(Session, String)>

Create an impersonation session for target_user_id.

pub async fn list_sessions(&self, user_id: Uuid) -> Result<Vec<Session>>

pub async fn revoke_all_sessions( &self, admin_id: Uuid, user_id: Uuid, ) -> Result<()>