Struct RbacManager 

pub struct RbacManager { /* private fields */ }

RBAC Manager — roles, policies, audit, and HitL approvals.

Implementations

impl RbacManager

pub fn new() -> Self

Create with default policies for all roles.

pub fn assign_role(&mut self, subject: Subject, role: Role)

Assign a role.

pub fn revoke_role(&mut self, subject: &Subject)

Revoke a role.

pub fn get_role(&self, subject: &Subject) -> Option<Role>

Get role for a subject.

pub fn check_permission( &mut self, subject: &Subject, action: &Action, resource: &str, ) -> bool

Check permission + audit.

pub fn request_approval( &mut self, subject: Subject, action: Action, resource: String, reason: String, ) -> Uuid

Request HitL approval.

pub fn approve(&mut self, id: Uuid) -> bool

Approve a request.

pub fn reject(&mut self, id: Uuid) -> bool

Reject a request.

pub fn pending_approvals(&self) -> Vec<&PendingApproval>

Pending approvals.

pub fn all_approvals(&self) -> &[(PendingApproval, ApprovalStatus)]

All approvals with status.

pub fn audit_log(&self) -> &[RbacAuditEntry]

Audit log.

Trait Implementations

impl Clone for RbacManager

fn clone(&self) -> RbacManager

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RbacManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RbacManager

fn default() -> Self

Returns the “default value” for a type.