Struct AuthzConfig 

pub struct AuthzConfig {
    pub limits: Limits,
    pub mapping: SubjectMapping,
    pub consistency: Consistency,
    pub fresh_for: BTreeSet<ActionClass>,
    pub expand_relations: Vec<String>,
    pub catalog_object: ObjectRef,
    pub check_cache_capacity: usize,
    pub break_glass: Option<BreakGlass>,
    pub refresh_interval: Duration,
}

Tuning for SystemDbAuthorizer.

Fields

limits: Limits

Search bounds for one check.

mapping: SubjectMapping

How a principal’s claims become subjects.

consistency: Consistency

Default consistency for a decision.

fresh_for: BTreeSet<ActionClass>

Action classes that always re-read the source, whatever consistency says. Empty by default; setting [Admin] makes control-plane changes wait for the newest policy while reads stay on the pinned snapshot.

expand_relations: Vec<String>

Relations a plain (non-userset) subject object is expanded through, so group:eng writer database:music grants everyone with member on group:eng.

catalog_object: ObjectRef

The object catalog-wide actions target.

check_cache_capacity: usize

Entries kept in the check-result cache; 0 disables it.

break_glass: Option<BreakGlass>

Operator recovery access when policy cannot be read.

refresh_interval: Duration

How often the refresh task polls when the source has no change signal.

Trait Implementations

impl Clone for AuthzConfig

fn clone(&self) -> AuthzConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthzConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthzConfig

fn default() -> Self

Returns the “default value” for a type.