pub struct AuthorizationRequest<'a> {Show 15 fields
pub original: CredentialPresentation,
pub wall_time: Option<ClockFrame>,
pub now: Duration,
pub order: AuthorizationOrder,
pub disable_reason_priority: DisableReasonPriority,
pub rights_policy: AuthorizationRightsPolicy,
pub fallback_threat_level: AuthorizationFact<u32>,
pub fallback_lockout: AuthorizationFact<bool>,
pub occupancy: AuthorizationOccupancy<'a>,
pub passback: AuthorizationPassback,
pub accompaniment_witnesses: &'a [AccompanimentWitness],
pub accompaniment_timing: AccompanimentTiming,
pub max_accompaniment_links: usize,
pub companion_authentication: &'a [CompanionAuthenticationAttestation],
pub external_phase: AuthorizationExternalPhase,
}Expand description
One already-authenticated local presentation and every application-owned authorization choice. There is no Default implementation or installed policy.
Database properties take precedence over their narrow absent-property fallbacks. Malformed, denied, or otherwise failed reads never use a fallback. All observations belong to one coherent application context; this API does not authenticate hardware, discover remote facts, or publish events.
Fields§
§original: CredentialPresentationAuthenticated original tuple; this helper is not the factor engine.
wall_time: Option<ClockFrame>Supplied local wall-clock frame used for all credential validity checks. Finite limits require a valid coherent frame. Two open limits do not.
now: DurationMonotonic observation time, separate from BACnet wall-clock time.
order: AuthorizationOrderEvery required criterion in the caller’s explicit order.
disable_reason_priority: DisableReasonPriorityExplicit precedence among multiple coherent disable reasons.
rights_policy: AuthorizationRightsPolicyExplicit treatment of original and companion excluded assignments.
fallback_threat_level: AuthorizationFact<u32>Point threat level if its property is genuinely absent; range 0..100. Zero disables the comparison without reading credential authority. Otherwise absent credential Threat_Authority means zero by specification.
fallback_lockout: AuthorizationFact<bool>Point Lockout if its property is genuinely absent.
occupancy: AuthorizationOccupancy<'a>Complete relevant occupancy context.
passback: AuthorizationPassbackPassback applicability, settings, and observed successful-entry evidence.
accompaniment_witnesses: &'a [AccompanimentWitness]Witnesses consumed by the existing bounded accompaniment stage.
accompaniment_timing: AccompanimentTimingExplicit order/period/boundary policy for selected accompaniment.
max_accompaniment_links: usizeExisting accompaniment traversal bound; exhaustion cannot grant access.
companion_authentication: &'a [CompanionAuthenticationAttestation]Authentication results for each companion actually relied upon.
external_phase: AuthorizationExternalPhaseExternal verification/delay observation if needed by the served mode.