Enum ScopeFilter 

pub enum ScopeFilter {
    Eq(EqScopeFilter),
    In(InScopeFilter),
}

A single scope filter — a typed predicate on a named resource property.

The property name (e.g., "owner_tenant_id", "id") is an authorization concept. Mapping to DB columns is done by ScopableEntity::resolve_property().

Variants mirror the predicate types from the PDP response:

• ScopeFilter::Eq — equality (property = value)
• ScopeFilter::In — set membership (property IN (values))

Future extensions

Additional filter types (in_tenant_subtree, in_group, in_group_subtree) are planned. See the authorization design document (docs/arch/authorization/DESIGN.md) for the full predicate taxonomy.

Variants

Eq(EqScopeFilter)

Equality: property = value.

In(InScopeFilter)

Set membership: property IN (values).

Implementations

impl ScopeFilter

pub fn eq(property: impl Into<String>, value: impl Into<ScopeValue>) -> Self

Create an equality filter (property = value).

pub fn in(property: impl Into<String>, values: Vec<ScopeValue>) -> Self

Create a set membership filter (property IN (values)).

pub fn in_uuids(property: impl Into<String>, uuids: Vec<Uuid>) -> Self

Create a set membership filter from UUID values (convenience).

pub fn property(&self) -> &str

The authorization property name.

pub fn values(&self) -> ScopeFilterValues<'_>

Collect all values as a slice-like view for iteration.

For Eq, returns a single-element slice; for In, returns the values slice.

pub fn uuid_values(&self) -> Vec<Uuid>

Extract filter values as UUIDs, skipping non-UUID entries.

Useful when the caller knows the property holds UUID values (e.g., owner_tenant_id, id).

Trait Implementations

impl Clone for ScopeFilter

fn clone(&self) -> ScopeFilter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScopeFilter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ScopeFilter

fn eq(&self, other: &ScopeFilter) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for ScopeFilter

impl StructuralPartialEq for ScopeFilter