dbnexus 0.6.0-rc.4

An enterprise-grade database abstraction layer for Rust with built-in permission control and connection pooling
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67

// Copyright (c) 2026 Kirky.X
// SPDX-License-Identifier: MIT
//! Access 模块
//!
//! 提供身份认证、权限控制、SQL 安全等功能

#[cfg(feature = "permission")]
pub mod permission;
pub mod security;

// 单文件模块
#[cfg(feature = "authentication")]
pub mod authentication;
/// 统一注入检测引擎（无外部依赖；关系型管线方法按 sql-parser 门控）
pub mod injection_engine;
#[cfg(feature = "permission-engine")]
pub mod permission_engine;
#[cfg(feature = "sql-parser")]
pub mod sql_parser;

/// 字段级脱敏与行级安全（data-protection feature）
#[cfg(feature = "data-protection")]
pub mod data_protection;

/// 权限变更审计链（HMAC-SHA256 链式签名，data-protection feature）
#[cfg(feature = "data-protection")]
pub mod permission_audit_chain;

/// 权限统一门面（RBAC + 脱敏 + RLS 单一入口）
#[cfg(all(feature = "permission", feature = "data-protection"))]
pub mod permission_facade;

// Re-exports: security
pub use injection_engine::{InjectionEngine, InjectionRule, RuleCategory};
#[cfg(feature = "sql-parser")]
pub use security::{
    AuditingDdlGuard, DdlAuditRecord, DdlGuard, DdlGuardPolicy, DdlValidationResult, DryRunDdlGuard,
};
pub use security::{MaskType, SensitiveError, SensitiveMasker, SensitiveResult};

// Re-exports: permission
#[cfg(all(feature = "permission", any(feature = "ladybug", feature = "neo4j")))]
pub use permission::GraphPermissionContext;
#[cfg(feature = "permission")]
pub use permission::{
    AdvancedRbacProvider, CacheStats, MemoryPermissionProvider, PermissionAction, PermissionCache,
    PermissionCacheConfig, PermissionCheckStats, PermissionCheckStatsSnapshot, PermissionConfig,
    PermissionContext, PermissionError, PermissionProvider, PermissionProviderError, RateLimiter,
    RbacProvider, RefreshablePermissionProvider, RolePolicy, TablePermission,
    YamlPermissionProvider,
};

// Re-exports: authentication
#[cfg(feature = "authentication")]
pub use authentication::{
    AuthCredentials, AuthError, AuthResult, AuthenticationManager, JwtClaims, JwtManager,
    PasswordHasher, TokenType, User,
};

// Re-exports: sql_parser
#[cfg(all(feature = "sql-parser", not(feature = "permission")))]
pub use sql_parser::PermissionAction;
#[cfg(feature = "sql-parser")]
pub use sql_parser::{SqlOperationType, SqlParser, contains_sql_injection, is_ddl_operation};

// Re-exports: permission_engine
// 注意：Engine* 别名仅在 crate root (lib.rs) 导出，此处不再重复导出以避免双重路径（HIGH-002 修复）