Struct CapabilityManifest 

pub struct CapabilityManifest { /* private fields */ }

Capability manifest for a rule file

Implementations

impl CapabilityManifest

pub fn new() -> Self

Create an empty manifest

pub fn safe() -> Self

Create a manifest with default safe capabilities

pub fn unrestricted() -> Self

Create a manifest with all capabilities

pub fn require(&mut self, cap: Capability)

Require a capability

pub fn request(&mut self, cap: Capability)

Request an optional capability

pub fn deny(&mut self, cap: Capability)

Deny a capability

pub fn restrict(&mut self, restriction: CapabilityRestriction)

Add a restriction

pub fn requires(&self, cap: Capability) -> bool

Check if capability is required

pub fn allows(&self, cap: Capability) -> bool

Check if capability is allowed

pub fn denies(&self, cap: Capability) -> bool

Check if capability is denied

pub fn required_capabilities(&self) -> &HashSet<Capability>

Get all required capabilities

pub fn optional_capabilities(&self) -> &HashSet<Capability>

Get all optional capabilities

pub fn restrictions_for( &self, cap: Capability, ) -> impl Iterator<Item = &CapabilityRestriction>

Get restrictions for a capability

pub fn is_path_allowed(&self, path: &str, cap: Capability) -> bool

Check if a path is allowed for file operations

pub fn to_bytes(&self) -> Vec<u8>

Serialize to bytes

Trait Implementations

impl Clone for CapabilityManifest

fn clone(&self) -> CapabilityManifest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityManifest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CapabilityManifest

fn default() -> CapabilityManifest

Returns the “default value” for a type.