Struct es_event_od_attribute_value_remove_t 

#[repr(C)]
pub struct es_event_od_attribute_value_remove_t {
    pub instigator: *mut es_process_t,
    pub error_code: i32,
    pub record_type: es_od_record_type_t,
    pub record_name: es_string_token_t,
    pub attribute_name: es_string_token_t,
    pub attribute_value: es_string_token_t,
    pub node_name: es_string_token_t,
    pub db_path: es_string_token_t,
    pub instigator_token: audit_token_t,
}

Available on macOS and crate feature macos_14_0_0 only.

Notification that an attribute value was removed to a record.

This event type does not support caching (notify-only).

Attributes conceptually have the type Map String (Set String). Each OD record has a Map of attribute name to Set of attribute value. When an attribute value is removed, it is inserted into the set of values for that name.

Removing a value that was never added is a no-op.

Fields

instigator: *mut es_process_t

Process that instigated operation (XPC caller).

error_code: i32

Result code for the operation.

Values indicating specific failure reasons are defined in odconstants.h.

record_type: es_od_record_type_t

The type of the record to which the attribute value was removed.

record_name: es_string_token_t

The name of the record to which the attribute value was removed.

attribute_name: es_string_token_t

The name of the attribute to which the value was removed.

attribute_value: es_string_token_t

The value that was removed.

node_name: es_string_token_t

OD node being mutated.

Typically one of “/Local/Default”, “/LDAPv3/” or “/Active Directory/”.

db_path: es_string_token_t

Optional. If node_name is “/Local/Default”, this is, the path of the database against which OD is authenticating.

instigator_token: audit_token_t

Available on crate feature macos_15_0_0 only.

Audit token of the process that instigated this event.

Field available only if message version >= 8.

Implementations

impl es_event_od_attribute_value_remove_t

Accessors for *mut and *const fields

pub unsafe fn instigator(&self) -> Option<&es_process_t>

Helper to avoid the is_null() + deref every time.

Safety

The pointer must be valid (aligned & initialized) for a value of the expected type.