Struct Engine 

pub struct Engine { /* private fields */ }

Canonical RBAC + ABAC engine with deny-override and default-deny semantics.

Implementations

impl Engine

pub fn new(roles: Vec<Role>, policies: Vec<Policy>) -> AppResult<Self>

Construct an engine from roles and policies.

pub fn authorize(&self, request: &Request) -> Decision

Evaluate a request.

Deny policies are evaluated before role grants and allow policies. Object-level constraints that should limit a role should be attached to the role Permission; constraints that must override any broad grant should be modeled as deny policies.

Trait Implementations

impl Checker for Engine

fn authorize(&self, request: &Request) -> Decision

Evaluate a request and return the full decision.

fn check(&self, request: &Request) -> bool

Return true when the request is allowed.

impl Clone for Engine

fn clone(&self) -> Engine

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Engine

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.