//! Role-based access control for SeaORM (`rbac` feature).
//!
//! Authorises connections at the SQL level: the [`RbacEngine`] reads
//! permissions out of dedicated database tables, attaches them to a
//! [`DatabaseConnection`](crate::DatabaseConnection) (producing a
//! [`RestrictedConnection`](crate::RestrictedConnection)), and then every
//! query / mutation is checked against the user's roles before being sent
//! to the database.
//!
//! See the [Role Based Access Control](https://www.sea-ql.org/blog/2025-09-30-sea-orm-rbac/)
//! blog post for an end-to-end walkthrough.
pub use *;
pub use UserId as RbacUserId;
pub use *;
pub use Error as RbacError;
use *;
/// Wildcard token (`"*"`) accepted by RBAC tables to mean "any permission"
/// or "any resource".
pub const WILDCARD: &str = "*";
pub use ;