Struct SchemaGrantStore 

pub struct SchemaGrantStore<O> { /* private fields */ }

GrantStore derived from the ownership table through the schema.

The principal’s holdings are SchemaRegistry::held_by: its direct live tuples and every tuple a subject set it belongs to confers, within the hop bound. Holdings whose kind has no schema are ignored (camp owns rows still feed the owns claim); an undeclared relation on a known kind is skipped with a warning. There is no direct-scope escape hatch: a scope is held only because a relation unlocks it.

Implementations

impl<O: OwnershipStore> SchemaGrantStore<O>

pub fn new( ownership: O, schema: Arc<SchemaRegistry>, scopes: Arc<ScopeRegistry>, ) -> Self

Trait Implementations

impl<O: OwnershipStore> GrantStore for SchemaGrantStore<O>

fn list_for<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, principal: &'life1 PrincipalId, aud: &'life2 str, ) -> Pin<Box<dyn Future<Output = Result<Vec<ScopeOrBundle>, StoreError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

All grant entries the principal holds for aud. An empty list means the principal is not entitled to mint a token for that audience — the mint path MUST reject. Order is whatever the impl returns; mint-time expansion dedupes (expand_scopes).