confium-pki 0.5.3

X.509 cert, scoped delegation, CMS, and XMLDSig for Confium
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

//! Delegation scope — what a child cert is authorized to do.

use crate::delegation::constraint::Constraint;
use crate::delegation::operation::Operation;
use serde::{Deserialize, Serialize};

/// The full scope of a delegated authority.
#[derive(Debug, Clone, Default, Serialize, Deserialize)]
pub struct DelegationScope {
    /// Operations the child is authorized to perform.
    pub allowed_operations: Vec<Operation>,
    /// Constraints that further narrow authorization.
    pub constraints: Vec<Constraint>,
}

impl DelegationScope {
    /// Construct a new empty scope.
    pub fn new() -> Self {
        Self::default()
    }

    /// Add an operation.
    pub fn allow_operation(mut self, op: Operation) -> Self {
        self.allowed_operations.push(op);
        self
    }

    /// Add a constraint.
    pub fn constrain(mut self, c: Constraint) -> Self {
        self.constraints.push(c);
        self
    }
}