Struct UserPermissions 

pub struct UserPermissions {

    pub level: u8,
    pub max_tier: String,
    pub model_access: Vec<String>,
    pub model_denylist: Vec<String>,
    pub tool_access: Vec<String>,
    pub tool_denylist: Vec<String>,
    pub max_context_tokens: usize,
    pub max_output_tokens: usize,
    pub rate_limit: u32,
    pub streaming_allowed: bool,
    pub escalation_allowed: bool,
    pub escalation_threshold: f32,
    pub model_override: bool,
    pub cost_budget_daily_usd: f64,
    pub cost_budget_monthly_usd: f64,
    pub custom_permissions: HashMap<String, Value>,
}

Resolved user permission capabilities.

This is the runtime permission object produced by layering: built-in defaults + level config + workspace config + user override + channel override. Unlike PermissionLevelConfig (which uses Option for partial overrides), all fields here are concrete values.

Fields

level: u8

Permission level (0 = zero_trust, 1 = user, 2 = admin).

max_tier: String

Maximum model tier this user can access.

model_access: Vec<String>

Explicit model allowlist. Empty = all models in allowed tiers.

model_denylist: Vec<String>

Explicit model denylist.

tool_access: Vec<String>

Tool names this user can invoke. ["*"] = all tools.

tool_denylist: Vec<String>

Tool names explicitly denied.

max_context_tokens: usize

Maximum input context tokens.

max_output_tokens: usize

Maximum output tokens per response.

rate_limit: u32

Rate limit in requests per minute. 0 = unlimited.

streaming_allowed: bool

Whether SSE streaming responses are allowed.

escalation_allowed: bool

Whether complexity-based escalation is allowed.

escalation_threshold: f32

Complexity threshold (0.0-1.0) above which escalation triggers.

model_override: bool

Whether the user can manually override model selection.

cost_budget_daily_usd: f64

Daily cost budget in USD. 0.0 = unlimited. Zero-trust default: $0.10/day (see design doc Section 2.2).

cost_budget_monthly_usd: f64

Monthly cost budget in USD. 0.0 = unlimited. Zero-trust default: $2.00/month (see design doc Section 2.2).

custom_permissions: HashMap<String, Value>

Extensible custom permission dimensions.

Trait Implementations

impl Clone for UserPermissions

fn clone(&self) -> UserPermissions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UserPermissions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for UserPermissions

fn default() -> Self

Returns zero-trust defaults. All values are restrictive. cost_budget_daily_usd = $0.10, cost_budget_monthly_usd = $2.00 per design doc Section 2.2 (NOT 0.0, which would mean unlimited).

impl<'de> Deserialize<'de> for UserPermissions

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for UserPermissions

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.