Struct Policy 

pub struct Policy { /* private fields */ }

A policy containing multiple rules

Security

Fields are private to enforce validation through deserialization. Use Policy::new() or deserialize from TOML/JSON to create instances. The #[serde(try_from)] attribute ensures all deserialized policies are validated against T20 limits (max rules, max name length, etc.).

Implementations

impl Policy

pub fn name(&self) -> &str

Get the policy name

pub const fn version(&self) -> u64

Get the policy version

pub const fn issued_at(&self) -> u64

Get the issuance timestamp

pub const fn valid_until(&self) -> u64

Get the expiration timestamp

pub fn rules(&self) -> &[PolicyRule]

Get a reference to the policy rules

pub fn metadata(&self) -> &BTreeMap<String, String>

Get a reference to the metadata

pub fn new( name: impl Into<String>, valid_duration_secs: u64, current_time: u64, ) -> Result<Self>

Create a new empty policy with version 1

Arguments

• name - Policy identifier
• valid_duration_secs - How long this policy is valid (in seconds)
• current_time - Current Unix timestamp (injected for purity/determinism)

Errors

Returns PolicyError::NameTooLong if name exceeds MAX_POLICY_NAME_LENGTH

pub fn new_unversioned(name: impl Into<String>) -> Result<Self>

Create a policy without timestamps (for testing/legacy)

Errors

Returns PolicyError::NameTooLong if name exceeds MAX_POLICY_NAME_LENGTH

pub fn add_rule(self, rule: PolicyRule) -> Result<Self>

Add a rule to this policy

Errors

Returns PolicyError::TooManyRules if adding this rule would exceed MAX_RULES_PER_POLICY

pub fn with_metadata( self, key: impl Into<String>, value: impl Into<String>, ) -> Self

Add metadata to this policy

pub fn is_allowed( &self, peer_id: &str, action: &Action, resource: &Resource, ) -> bool

Check if a peer is allowed to perform an action on a resource

This method delegates to PolicyAuthorizer (SRP - Single Responsibility Principle). The Policy struct focuses on construction and management, while authorization logic is handled by the dedicated PolicyAuthorizer.

pub fn validate(&self) -> Result<()>

Validate policy (check for conflicts, invalid rules, etc.)

Errors

Returns PolicyError::InvalidRule if:

• Policy name is empty
• Policy has no rules
• Any rule has an empty peer ID

pub fn from_toml(toml_str: &str) -> Result<Self>

Load policy from TOML string

Errors

Returns an error if:

• TOML parsing fails
• Validation fails (see validate())

pub fn to_toml(&self) -> Result<String>

Serialize policy to TOML string

Errors

Returns PolicyError::SerializationError if TOML serialization fails

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Policy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Policy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.