made-core 0.8.0

Domain core of MADE: entities, value objects, events, ports. No IO.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

use std::collections::BTreeSet;

use serde::{Deserialize, Serialize};

use crate::error::DomainError;

use super::{ContextKey, RoleId};

/// A role selected from ceremony context at claim time.
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
pub struct DynamicRoleBinding {
    context_key: ContextKey,
    allowed_roles: BTreeSet<RoleId>,
}

impl DynamicRoleBinding {
    pub fn new(
        context_key: ContextKey,
        allowed_roles: impl IntoIterator<Item = RoleId>,
    ) -> Result<Self, DomainError> {
        let supplied = allowed_roles.into_iter().collect::<Vec<_>>();
        if supplied.is_empty() {
            return Err(DomainError::EmptyCollection {
                field: "dynamic_role_binding.allowed_roles",
            });
        }
        let canonical = supplied.iter().cloned().collect::<BTreeSet<_>>();
        if canonical.len() != supplied.len() {
            return Err(DomainError::AlreadyExists {
                what: "dynamic_role_binding.allowed_role",
            });
        }
        Ok(Self {
            context_key,
            allowed_roles: canonical,
        })
    }

    #[must_use]
    pub fn context_key(&self) -> &ContextKey {
        &self.context_key
    }

    #[must_use]
    pub fn allowed_roles(&self) -> &BTreeSet<RoleId> {
        &self.allowed_roles
    }

    #[must_use]
    pub fn allows(&self, role_id: &RoleId) -> bool {
        self.allowed_roles.contains(role_id)
    }
}