Enum DenyLayer 

pub enum DenyLayer {
    Capability,
    Rbac,
    Permission,
    ExecPolicy,
}

Which security layer produced the deny decision.

Variants

Capability

CSpace missing required capability.

Rbac

RBAC role does not allow action.

Permission

AgentPermissions denied (tool/path not in allowed set).

ExecPolicy

ExecConfig denied (binary not in allowlist, metacharacters).

Trait Implementations

impl Clone for DenyLayer

fn clone(&self) -> DenyLayer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for DenyLayer

impl Debug for DenyLayer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for DenyLayer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for DenyLayer

impl PartialEq for DenyLayer

fn eq(&self, other: &DenyLayer) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for DenyLayer