Struct AllOfVeto 

pub struct AllOfVeto<D: PolicyDomain> { /* private fields */ }

Forbids when all veto children forbid.

Implementations

impl<D: PolicyDomain> AllOfVeto<D>

pub fn try_new( policies: Vec<Arc<dyn VetoPolicy<D>>>, ) -> Result<Self, EmptyPoliciesError>

Builds a combinator from a nonempty list.

impl<D: PolicyDomain> AllOfVeto<D>

pub fn named(self, name: impl Into<Cow<'static, str>>) -> Self

Replaces this combinator’s default type name (for example "AllOfVeto") in its audit-tree node, attribution paths, and telemetry, so two combinators of the same type can be told apart.

An all-of veto forbids only when every child does, so this is the name crate::AccessEvaluation::forbidden_by reports; name it after the rule it expresses.

Unlike crate::PermissionChecker::named, which only labels a checker’s telemetry, this name is the policy’s audit identity.

Trait Implementations

impl<D: PolicyDomain> VetoPolicy<D> for AllOfVeto<D>

fn evaluate<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, ctx: &'life1 EvalCtx<'life2, D>, ) -> Pin<Box<dyn Future<Output = VetoResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Evaluates the veto for one resource.

fn evaluate_batch<'item, 'life0, 'life1, 'async_trait>( &'life0 self, ctx: &'life1 BatchEvalCtx<'item, D>, ) -> Pin<Box<dyn Future<Output = Vec<VetoResult>> + Send + 'async_trait>>

where Self: 'async_trait, 'item: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Returns one result per input, in the same order.

fn policy_type(&self) -> Cow<'static, str>

Name for audit trees and telemetry.

fn security_rule(&self) -> SecurityRuleMetadata

Security-rule metadata.