Struct Policy 

pub struct Policy {
    pub id: &'static str,
    pub rules: &'static [Rule],
}

A named set of rules that must all pass for access.

Policies are defined as const values and attached to service methods via the #[policy] macro.

Fields

id: &'static str

Unique identifier for this policy (e.g. “harness.manage”).

rules: &'static [Rule]

Rules that must all pass. AND logic.

Implementations

impl Policy

pub fn evaluate(&self, caller: &Caller) -> Result<(), PolicyError>

Evaluate all rules against the caller. Returns Ok(()) if all pass, or Err(PolicyError) on the first failing rule.

pub fn evaluate_with( &self, resolver: &dyn PermissionResolver, caller: &Caller, ) -> Result<(), PolicyError>

Evaluate all rules against the caller using a custom permission resolver.

Rule::UserHasPermission checks are delegated to resolver, while other rule types keep their current built-in behavior.

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.