Struct ServicePermissionGuard 

pub struct ServicePermissionGuard<E, S, P>
where
    E: Send + Sync + 'static,
    P: ResourcePolicy<E>,
{ /* private fields */ }

Generic permission guard that wraps both a service and an auth context provider.

Generated modules emit a type alias:

// Generated (Phase 1):
impl ResourcePolicy<Order> for OrderPolicy {
    fn resource_type() -> &'static str { "orders" }
    fn create_permission() -> &'static str { "orders:create" }
    // ...
    async fn can(&self, action, entity, ctx) -> bool { ... }
}

pub type OrderGuard = ServicePermissionGuard<Order, OrderService, OrderPolicy>;

E — entity type S — underlying service P — resource policy implementation

Implementations

impl<E, S, P> ServicePermissionGuard<E, S, P>

where E: Send + Sync + 'static, P: ResourcePolicy<E>,

pub fn new(service: Arc<S>, policy: Arc<P>) -> Self

pub fn service(&self) -> &Arc<S>

Access the underlying service.

pub fn policy(&self) -> &Arc<P>

Access the underlying policy.

pub async fn check( &self, action: ResourceAction, entity: &E, ctx: &AuthContext, ) -> Result<(), AccessDenied>

Check whether ctx may perform action on entity, returning Ok(()) on permit or Err(AccessDenied) on deny.