Struct Attenuated 

pub struct Attenuated<P: Permission, S: Scope> { /* private fields */ }

A capability that has been narrowed to a specific scope.

Created via Cap::attenuate. The attenuated capability can only act on targets that pass the scope’s check method.

Example

let root = test_root();
let scoped = root.grant::<FsRead>().attenuate(DirScope::new("/tmp").unwrap());
assert!(scoped.check("/tmp/data.txt").is_ok());
assert!(scoped.check("/etc/passwd").is_err());

Implementations

impl<P: Permission, S: Scope> Attenuated<P, S>

pub fn check(&self, target: &str) -> Result<(), CapSecError>

Checks whether target is within this capability’s scope.