Struct SubscriptionPolicy 

pub struct SubscriptionPolicy {
    pub owner_path: String,
    pub identity_field: String,
    pub bypass_roles: Vec<String>,
}

An entity’s row-visibility policy for subscription delivery (#596).

Declared per entity in the compiled schema (TypeDefinition::subscription_policy):

"subscription_policy": {
  "owner_path": "$.owner_id",      // single-level path into the after-image
  "identity_field": "user_id",     // the fraiseql.enriched.* field (#539)
  "bypass_roles": ["admin"]        // roles that get full visibility
}

Fields

owner_path: String

The single-level JSON path into the after-image holding the owner id (e.g. "$.owner_id"). Only $.<field> is supported — the delivery matchers key on a flat field name.

identity_field: String

The enriched-identity field (in the fraiseql.enriched.* namespace, #539) whose value the owner must equal (e.g. "user_id").

bypass_roles: Vec<String>

Roles that bypass the policy entirely (full visibility, e.g. ["admin"]).

Implementations

impl SubscriptionPolicy

pub fn owner_field(&self) -> &str

The flat owner field name the delivery matchers key on — owner_path with a leading $. stripped.

pub fn validate(&self) -> Result<(), String>

Validate the policy at load time.

Errors

• owner_path is empty or a nested path (only single-level $.<field>).
• identity_field is empty.

pub fn derive( &self, attributes: &HashMap<String, Value>, roles: &[String], ) -> OwnerCondition

Derive the owner condition for a connection whose enriched identity is in attributes and whose roles are roles (#596). Bypass role → Bypass; a resolvable identity → Eq; otherwise fail-closed Refuse.

The identity value is read only from the server-resolved fraiseql.enriched.* namespace — the #539 resolver strips any inbound fraiseql.* claims, so a client-supplied plain attribute cannot widen visibility.

Trait Implementations

impl Clone for SubscriptionPolicy

fn clone(&self) -> SubscriptionPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SubscriptionPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SubscriptionPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SubscriptionPolicy

impl PartialEq for SubscriptionPolicy

fn eq(&self, other: &SubscriptionPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SubscriptionPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SubscriptionPolicy