Struct AuthorizationService 

pub struct AuthorizationService<R, G>
where
    R: AccessHierarchy + Eq + Display,
    G: Eq + Clone,
{ /* private fields */ }

Domain service for authorization decisions.

This service contains pure business logic for determining whether an account is authorized based on an access policy. It has no external dependencies and can be used across different application contexts.

Implementations

impl<R, G> AuthorizationService<R, G>

where R: AccessHierarchy + Eq + Display, G: Eq + Clone,

pub fn new(policy: AccessPolicy<R, G>) -> Self

Creates a new authorization service with the given access policy.

pub fn is_authorized(&self, account: &Account<R, G>) -> bool

Determines if the account is authorized based on any of the configured criteria.

Returns true if the account matches ANY of:

• Required permissions
• Required groups
• Required exact roles
• Required roles via supervisor relationship (ordering: higher privilege > lower privilege)

pub fn meets_role_requirement(&self, account: &Account<R, G>) -> bool

Checks if the account meets any of the required roles.

pub fn meets_role_hierarchy_requirement(&self, account: &Account<R, G>) -> bool

Checks if the account has a role that satisfies a required role via hierarchy ordering.

Ordering contract: Higher privilege > Lower privilege. A supervisor or the same role satisfies: user_role >= required_role.

pub fn meets_group_requirement(&self, account: &Account<R, G>) -> bool

Checks if the account meets any of the required groups.

pub fn meets_permission_requirement(&self, account: &Account<R, G>) -> bool

Checks if the account meets any of the required permissions.

pub fn policy_denies_all_access(&self) -> bool

Returns true if the policy denies all access (no requirements configured).

Trait Implementations

impl<R, G> Clone for AuthorizationService<R, G>

where R: AccessHierarchy + Eq + Display + Clone, G: Eq + Clone + Clone,

fn clone(&self) -> AuthorizationService<R, G>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<R, G> Debug for AuthorizationService<R, G>

where R: AccessHierarchy + Eq + Display + Debug, G: Eq + Clone + Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.