Struct ChronixResource 

pub struct ChronixResource {
    pub measurement: String,
    pub namespace: Option<String>,
    pub tags: BTreeMap<String, String>,
}

A Chronix resource subject to authorization.

Fields

measurement: String

Measurement name.

namespace: Option<String>

Optional namespace the measurement belongs to.

When set, the Cedar entity for this resource will have the corresponding Chronix::Namespace as a parent, enabling namespace-scoped policies such as:

permit(
  principal in Chronix::Role::"ns_reader",
  action == Chronix::Action::"Read",
  resource in Chronix::Namespace::"production"
);

tags: BTreeMap<String, String>

Optional tag constraints (for fine-grained access).

Implementations

impl ChronixResource

pub fn measurement(name: impl Into<String>) -> Self

Create a new resource for a measurement.

pub fn with_namespace(self, ns: impl Into<String>) -> Self

Set the namespace this measurement belongs to.

This causes the measurement entity to have the namespace as a Cedar parent, enabling resource in Chronix::Namespace::"..." policies.

pub fn with_tag(self, key: impl Into<String>, value: impl Into<String>) -> Self

Add a tag constraint.

pub fn to_entity(&self) -> Result<Entity, AuthzError>

Convert to a Cedar entity.

If a namespace is set, the namespace entity is included as a parent so that resource in Chronix::Namespace::"..." policies evaluate correctly.

pub fn namespace_entity(&self) -> Option<Entity>

Build the namespace parent entity (if set).

Call this to include in the Cedar entity set so the authorizer can resolve the parent relationship.

pub fn to_entity_uid(&self) -> EntityUid

Convert to the Cedar entity UID.

Trait Implementations

impl Clone for ChronixResource

fn clone(&self) -> ChronixResource

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ChronixResource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ChronixResource

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ChronixResource

impl PartialEq for ChronixResource

fn eq(&self, other: &ChronixResource) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ChronixResource

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ChronixResource