Enum Capability 

pub enum Capability {
    FsRead {
        root: PathRoot,
    },
    FsWrite {
        root: PathRoot,
    },
    Network {
        host: NetworkHost,
    },
    CrossComponentRead {
        target: ComponentId,
    },
}

One kind paired with its only valid scope type.

Variants

FsRead

Filesystem read authority rooted at root.

Fields

root: PathRoot

Absolute lexical root, or path being consumed during a check.

FsWrite

Filesystem write authority rooted at root.

Fields

root: PathRoot

Absolute lexical root, or path being consumed during a check.

Network

Network authority for exactly host.

Fields

host: NetworkHost

Exact host; no glob or pattern syntax is recognized.

CrossComponentRead

Read authority for exactly one foreign component.

Fields

target: ComponentId

Component whose ephemeral read-only view may be resolved.

Implementations

impl Capability

pub const fn kind(&self) -> CapabilityKind

Returns the closed kind represented by this scoped capability.

pub fn scope(&self) -> CapabilityScope

Returns a typed copy of this capability’s scope.

pub fn validate(&self) -> Result<(), ScopeValidationError>

Validates that this scope can be safely matched by the v1 exact rules.

Errors

Returns why a path root or exact host is malformed.

pub fn covers(&self, consumed: &Capability) -> bool

Reports whether this declaration/grant covers one consuming act.

Filesystem roots use lexical path containment. Network and component scopes use exact equality; there is no glob or pattern interpretation.

Trait Implementations

impl Clone for Capability

fn clone(&self) -> Capability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Capability

fn deserialize<__D>( __deserializer: __D, ) -> Result<Capability, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Capability

impl Hash for Capability

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Capability

fn cmp(&self, other: &Capability) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Capability

fn eq(&self, other: &Capability) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for Capability

fn partial_cmp(&self, other: &Capability) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for Capability

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Capability