Enum AccessScope 

pub enum AccessScope {
    Platform,
    Company(Uuid),
}

Per-request access scope, injected by the application’s auth middleware as an axum Extension. Platform sees everything (a superadmin / root caller); Company(id) is scoped to one tenant.

It governs two boundaries, and they must agree:

• row visibility — the SQL fence (EntityRepoMeta::company_field), which decides which rows exist for this caller at all;
• field visibility — @private fields, gated on the row’s @owner matching.

Deriving it

There must be exactly ONE answer to “who is the tenant” per request. Build this from the authenticated principal — backbone_auth::company::CompanyContext, whose company_id comes from a signed claim — never populate it independently:

let scope = AccessScope::Company(tenant_ctx.company_id);

Two independently-populated identities can disagree under partial wiring, and the failure is a silent cross-tenant read. Uuid rather than String so the fence and the writer cannot drift on formatting.

Variants

Platform

Full visibility — platform/root caller. No company fence is applied.

Company(Uuid)

Scoped to a single company (legal entity); only this company’s rows are visible.

Implementations

impl AccessScope

pub fn company(&self) -> Option<Uuid>

The company to fence queries by, or None for a platform caller.

Feed this to the ORM’s scoped read paths. Note None here means “platform, no fence” — it is NOT the same as an absent AccessScope, which means the request was never scoped and must be refused for a company-scoped entity.

Trait Implementations

impl Clone for AccessScope

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AccessScope

impl Debug for AccessScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AccessScope

impl PartialEq for AccessScope

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AccessScope