rust-rbac 0.1.0

A flexible Role-Based Access Control (RBAC) system for Rust applications
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

use rust_rbac::{RbacService, MemoryStorage, Permission, Role};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    // Create a new RBAC service with in-memory storage
    let storage = MemoryStorage::new();
    let rbac = RbacService::new(storage);

    // Create permissions
    let create_post = Permission::new("create-post");
    let edit_post = Permission::new("edit-post");
    let delete_post = Permission::new("delete-post");
    let view_dashboard = Permission::new("view-dashboard");

    println!("Creating permissions...");
    rbac.create_permission(&create_post).await?;
    rbac.create_permission(&edit_post).await?;
    rbac.create_permission(&delete_post).await?;
    rbac.create_permission(&view_dashboard).await?;

    // Create roles
    let author = Role::with_description("author", "Can create and edit own posts");
    let editor = Role::with_description("editor", "Can edit and delete any post");
    let admin = Role::with_description("admin", "Has full access to the system");

    println!("Creating roles...");
    rbac.create_role(&author).await?;
    rbac.create_role(&editor).await?;
    rbac.create_role(&admin).await?;

    // Assign permissions to roles
    println!("Assigning permissions to roles...");
    rbac.assign_permission_to_role("create-post", "author").await?;
    rbac.assign_permission_to_role("edit-post", "author").await?;
    
    rbac.assign_permission_to_role("edit-post", "editor").await?;
    rbac.assign_permission_to_role("delete-post", "editor").await?;
    
    rbac.assign_permission_to_role("create-post", "admin").await?;
    rbac.assign_permission_to_role("edit-post", "admin").await?;
    rbac.assign_permission_to_role("delete-post", "admin").await?;
    rbac.assign_permission_to_role("view-dashboard", "admin").await?;

    // Create users
    let alice_id = "user-alice";
    let bob_id = "user-bob";
    let charlie_id = "user-charlie";

    // Assign roles to users
    println!("Assigning roles to users...");
    rbac.assign_role_to_subject("author", alice_id).await?;
    rbac.assign_role_to_subject("editor", bob_id).await?;
    rbac.assign_role_to_subject("admin", charlie_id).await?;

    // Check permissions
    println!("\nChecking permissions:");
    
    println!("Alice (author):");
    println!("  Can create post: {}", rbac.subject_has_permission(alice_id, "create-post").await?);
    println!("  Can edit post: {}", rbac.subject_has_permission(alice_id, "edit-post").await?);
    println!("  Can delete post: {}", rbac.subject_has_permission(alice_id, "delete-post").await?);
    println!("  Can view dashboard: {}", rbac.subject_has_permission(alice_id, "view-dashboard").await?);
    
    println!("\nBob (editor):");
    println!("  Can create post: {}", rbac.subject_has_permission(bob_id, "create-post").await?);
    println!("  Can edit post: {}", rbac.subject_has_permission(bob_id, "edit-post").await?);
    println!("  Can delete post: {}", rbac.subject_has_permission(bob_id, "delete-post").await?);
    println!("  Can view dashboard: {}", rbac.subject_has_permission(bob_id, "view-dashboard").await?);
    
    println!("\nCharlie (admin):");
    println!("  Can create post: {}", rbac.subject_has_permission(charlie_id, "create-post").await?);
    println!("  Can edit post: {}", rbac.subject_has_permission(charlie_id, "edit-post").await?);
    println!("  Can delete post: {}", rbac.subject_has_permission(charlie_id, "delete-post").await?);
    println!("  Can view dashboard: {}", rbac.subject_has_permission(charlie_id, "view-dashboard").await?);

    // Direct permission assignment
    println!("\nAssigning direct permission to Alice...");
    rbac.assign_permission_to_subject("view-dashboard", alice_id).await?;
    
    println!("Alice after direct permission assignment:");
    println!("  Can view dashboard: {}", rbac.subject_has_permission(alice_id, "view-dashboard").await?);

    Ok(())
}