Enum PermissionConstraint

pub enum PermissionConstraint {
    PathConstraint {
        allowed: Vec<String>,
        denied: Vec<String>,
    },
    SizeConstraint {
        max_size: u64,
    },
    TimeConstraint {
        max_duration: u64,
    },
    NetworkConstraint {
        allowed: bool,
        allowed_hosts: Vec<String>,
        denied_hosts: Vec<String>,
    },
    ResourceConstraint {
        max_memory_mb: Option<u64>,
        max_cpu_percent: Option<u32>,
    },
    CustomConstraint {
        name: String,
        params: HashMap<String, Value>,
    },
}

Constraints that can be applied to permissions

Variants

PathConstraint

Path-based constraints

Fields

allowed: Vec<String>

Allowed paths or patterns

denied: Vec<String>

Denied paths or patterns

SizeConstraint

Size-based constraints

Fields

max_size: u64

Maximum size in bytes

TimeConstraint

Time-based constraints

Fields

max_duration: u64

Maximum execution time in seconds

NetworkConstraint

Network-based constraints

Fields

allowed: bool

Whether network access is allowed

allowed_hosts: Vec<String>

Allowed hosts/domains

denied_hosts: Vec<String>

Denied hosts/domains

ResourceConstraint

Resource-based constraints

Fields

max_memory_mb: Option<u64>

Maximum memory usage in MB

max_cpu_percent: Option<u32>

Maximum CPU usage percentage

CustomConstraint

Custom constraints

Fields

name: String

Constraint name

params: HashMap<String, Value>

Constraint parameters

Trait Implementations

impl Clone for PermissionConstraint

fn clone(&self) -> PermissionConstraint

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionConstraint

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PermissionConstraint

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for PermissionConstraint

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.