Struct SecurityConfig 

pub struct SecurityConfig {
    pub role_definitions: Vec<RoleDefinition>,
    pub default_role: Option<String>,
    pub multi_tenant: bool,
    pub additional: HashMap<String, Value>,
}

Security configuration from fraiseql.toml.

Contains role definitions and other security-related settings that are compiled into schema.compiled.json.

Fields

role_definitions: Vec<RoleDefinition>

Role definitions mapping role names to their granted scopes.

default_role: Option<String>

Default role when none is specified.

multi_tenant: bool

Whether this schema serves multiple tenants with data isolation via RLS.

When true and caching is enabled, FraiseQL verifies that Row-Level Security is active on the database at startup. This prevents silent cross-tenant data leakage through the cache.

Set rls_enforcement in CacheConfig to control whether a missing RLS check causes a startup failure or only emits a warning.

additional: HashMap<String, Value>

Additional security settings (rate limiting, audit logging, etc.)

Implementations

impl SecurityConfig

pub fn new() -> Self

Create a new empty security configuration.

pub fn add_role(&mut self, role: RoleDefinition)

Add a role definition.

pub fn find_role(&self, name: &str) -> Option<&RoleDefinition>

Find a role definition by name.

pub fn get_role_scopes(&self, role_name: &str) -> Vec<String>

Get all scopes granted to a role.

pub fn role_has_scope(&self, role_name: &str, scope: &str) -> bool

Check if a role has a specific scope.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> SecurityConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SecurityConfig

fn eq(&self, other: &SecurityConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for SecurityConfig

impl StructuralPartialEq for SecurityConfig