Enum AccessTier 

#[non_exhaustive]
pub enum AccessTier {
    Anon,
    Read,
    Write,
    Approve,
}

Access tier granted to a caller after token verification.

Tiers are linearly inclusive: Approve covers Write, Write covers Read, Read covers Anon. Each engine operation declares the minimum tier it requires; lower tiers fail with crate::EngineError::Auth.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Anon

No token presented. Allowed only on public reads when no read token is configured.

Read

Read token. Allowed: read, list, subscribe, audit verify.

Write

Write token. Allowed: everything Read plus ordinary replace/append in home/, tmp/, dev/, sys/, and non-log var/.

Approve

Approve token. Allowed: everything Write plus delete + writes into protected namespaces (etc/, lib/, boot/, usr/, var/log/).

Trait Implementations

impl Clone for AccessTier

fn clone(&self) -> AccessTier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AccessTier

impl Debug for AccessTier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AccessTier

impl PartialEq for AccessTier

fn eq(&self, other: &AccessTier) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AccessTier