Enum AccessRightsDecision 

#[non_exhaustive]
pub enum AccessRightsDecision {
    Exempt,
    #[non_exhaustive]
    Granted {
        rule: AccessRulePosition,
    },
    #[non_exhaustive]
    Denied {
        access_event: AccessEvent,
        rule: Option<AccessRulePosition>,
    },
}

The outcome of the Access Rights check (Clause 12.34.9.2).

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Exempt

The credential’s Authorization_Exemptions lists ACCESS_RIGHTS, so the check didn’t run and counts as passed (Clause 12.35.25).

#[non_exhaustive]

Granted

No negative rule held, and this positive rule did: the first in gathering and array order.

Fields

Non-exhaustive enum variants could have additional fields added in future. Therefore, non-exhaustive enum variants cannot be constructed in external crates and cannot be matched against.

rule: AccessRulePosition

The positive rule that granted access.

#[non_exhaustive]

Denied

The check failed.

Fields

Non-exhaustive enum variants could have additional fields added in future. Therefore, non-exhaustive enum variants cannot be constructed in external crates and cannot be matched against.

access_event: AccessEvent

The Access_Event value Clause 12.34.9.2 gives this failure: DENIED_POINT_NO_ACCESS_RIGHTS or DENIED_ZONE_NO_ACCESS_RIGHTS for a negative rule, DENIED_OUT_OF_TIME_RANGE, or DENIED_NO_ACCESS_RIGHTS. The evaluator doesn’t write it.

rule: Option<AccessRulePosition>

The rule behind the denial: the negative rule that held, or, for DENIED_OUT_OF_TIME_RANGE, the first positive rule that covered the point while a value read for its time range was FALSE. None for DENIED_NO_ACCESS_RIGHTS.

Implementations

impl AccessRightsDecision

pub fn allows(&self) -> bool

Whether the check let the credential through: granted or exempt.

pub fn access_event(&self) -> Option<AccessEvent>

The Access_Event value of a denial, None otherwise.

pub fn rule(&self) -> Option<AccessRulePosition>

The rule the decision names: the granting rule, or a denial’s rule when it has one.

Trait Implementations

impl Clone for AccessRightsDecision

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AccessRightsDecision

impl Debug for AccessRightsDecision

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AccessRightsDecision

impl PartialEq for AccessRightsDecision

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AccessRightsDecision