Struct BreakGlass 

pub struct BreakGlass {
    pub subjects: BTreeSet<String>,
    pub roles: BTreeSet<String>,
}

Who may still act when the authorization database cannot be read.

This exists for operator recovery — restoring a corrupted authz database, reaching a cluster whose policy store is down — and nothing else. Every break-glass grant is audited as a denial-turned-grant at warn.

Fields

subjects: BTreeSet<String>

Principal subjects admitted while the policy is unavailable.

roles: BTreeSet<String>

Roles admitted while the policy is unavailable.

Implementations

impl BreakGlass

pub fn admits(&self, principal: &Principal) -> bool

Whether principal is admitted by this configuration.

Trait Implementations

impl Clone for BreakGlass

fn clone(&self) -> BreakGlass

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BreakGlass

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for BreakGlass

fn default() -> BreakGlass

Returns the “default value” for a type.