Struct ScopeConstraint 

pub struct ScopeConstraint { /* private fields */ }

A conjunction (AND) of scope filters — one access path.

All filters within a constraint must match simultaneously for a row to be accessible via this path.

Implementations

impl ScopeConstraint

pub fn try_new(filters: Vec<ScopeFilter>) -> Result<Self, EmptyScopeConstraint>

Create a new scope constraint from a non-empty list of filters.

Errors

Returns EmptyScopeConstraint if filters is empty. Rejecting here is what keeps a predicate-free constraint from reaching a consumer at all: the policy compiler builds one of these from whatever predicates a PDP returned, and a decision that produced none would otherwise widen into an allow-all grant instead of failing closed.

pub fn new(filters: Vec<ScopeFilter>) -> Self

Create a new scope constraint from a list of filters known to be non-empty.

Panics

Panics if filters is empty. Prefer ScopeConstraint::try_new wherever the list is derived from input rather than written out in place; this exists for literals and test fixtures, where an empty list is a bug in the caller rather than a condition to handle.

pub fn filters(&self) -> &[ScopeFilter]

The filters in this constraint (AND-ed together).

pub fn is_empty(&self) -> bool

Returns true if this constraint has no filters.

Trait Implementations

impl Clone for ScopeConstraint

fn clone(&self) -> ScopeConstraint

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScopeConstraint

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ScopeConstraint

fn eq(&self, other: &ScopeConstraint) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ScopeConstraint