Struct PermissionChecker 

pub struct PermissionChecker { /* private fields */ }

Main permission checker

Implementations

impl PermissionChecker

pub fn new() -> Self

pub fn load_policy(&mut self, policy: ProfilePolicy)

Load profile policy for tenant (called during bootstrap)

pub fn load_collection_policy(&mut self, policy: CollectionPolicy)

Load collection policy for resource type + action

pub fn get_collection_policy( &self, resource_type: &str, action: &str, ) -> Option<&CollectionPolicy>

Get collection policy for resource type and action

pub fn has_permission( &self, subject: &AuthCtx, action: &str, object: &dyn AttrSet, environment: &Environment, ) -> bool

Core permission check function

pub fn has_collection_permission( &self, subject: &AuthCtx, subject_attrs: &dyn AttrSet, resource_type: &str, action: &str, environment: &Environment, ) -> bool

Evaluate collection policy (for CREATE operations)

Collection policies check subject attributes without an object existing. Used for operations like “can user upload files?” or “can user create posts?”

Trait Implementations

impl Default for PermissionChecker

fn default() -> Self

Returns the “default value” for a type.