Struct ACL 

pub struct ACL { /* private fields */ }

Access control list manager.

Thread safety: Rust’s borrow checker enforces exclusive access for mutation (&mut self for add_rule/remove_rule/reload). The check() method takes &self and is safe for concurrent reads. No internal lock is needed.

Implementations

impl ACL

pub fn new(rules: Vec<ACLRule>, default_effect: impl Into<String>) -> ACL

Create a new ACL with the given rules and default effect.

pub fn set_audit_logger( &mut self, logger: impl Fn(&AuditEntry) + Send + Sync + 'static, )

Set the audit logger callback.

pub fn add_rule(&mut self, rule: ACLRule) -> Result<(), ModuleError>

Add a rule to the ACL (inserted at position 0, highest priority).

pub fn remove_rule(&mut self, callers: &[String], targets: &[String]) -> bool

Remove the first rule matching the given callers and targets. Returns true if a rule was removed.

pub fn check( &self, caller_id: Option<&str>, target_id: &str, ctx: Option<&Context<Value>>, ) -> Result<bool, ModuleError>

Check whether the given caller is allowed to access the target. Uses first-match-wins evaluation. Maps None caller to @external.

pub fn load(path: &str) -> Result<ACL, ModuleError>

Load ACL rules from a YAML file.

pub fn reload(&mut self) -> Result<(), ModuleError>

Reload rules from the stored YAML path.

pub fn rules(&self) -> &[ACLRule]

Return a reference to the current rules.

Returns a snapshot of the current rules.

Trait Implementations

impl Clone for ACL

fn clone(&self) -> ACL

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ACL

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for ACL

fn default() -> ACL

Returns the “default value” for a type.