Struct Policy 

pub struct Policy { /* private fields */ }

An immutable, compiled policy snapshot at one authz basis t.

Implementations

impl Policy

pub fn empty() -> Self

The empty policy at basis 0: no permission maps, so it denies everything. This is the fail-closed value, not a default to run on.

pub fn compile(db: &Db) -> Result<Self, PolicyError>

Compiles the policy recorded in db.

Errors

Returns PolicyError when the snapshot is not an authz database or a policy entity is malformed. Compilation is all-or-nothing on purpose: a half-read policy would silently under- or over-grant.

pub const fn basis_t(&self) -> u64

The authz database basis this policy was compiled from.

pub const fn stats(&self) -> PolicyStats

Counts of the policy entities compiled.

pub fn principal(&self, id: &str) -> Option<&PrincipalDef>

The registration for id, when policy data names it.

pub fn objects_for_database(&self, name: &str) -> &[ObjectRef]

Objects registered as standing for the Corium database name.

pub fn relations_for( &self, object_type: &str, action: Action, ) -> BTreeSet<String>

Relations that satisfy action on an object of object_type.

Matching widens in three steps — the exact action name, then its class (read/write/admin), then * — each against both the object’s own type and *, so a policy can be as specific or as coarse as it likes.

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.