Struct RbacPolicy 

pub struct RbacPolicy {
    pub role: Role,
    pub allowed_actions: HashSet<Action>,
    pub resource_patterns: Vec<String>,
    pub max_concurrent_agents: usize,
}

RBAC policy defining what a role can do.

Fields

role: Role

The role this policy applies to.

allowed_actions: HashSet<Action>

Set of actions this role is allowed to perform.

resource_patterns: Vec<String>

Glob patterns for accessible resources.

max_concurrent_agents: usize

Maximum number of concurrent agents for this role.

Implementations

impl RbacPolicy

pub fn allows(&self, action: &Action) -> bool

Checks whether this policy allows the given action.

Supports wildcard matching for UseTool("*") (matches any tool name) and AccessPath("*") (matches any path).

Trait Implementations

impl Clone for RbacPolicy

fn clone(&self) -> RbacPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RbacPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RbacPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for RbacPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.