Enum GhostkeyScope 

#[non_exhaustive]
pub enum GhostkeyScope {
    ReadPublic,
    Sign,
    Export,
    Delete,
    Admin,
}

What an authorised caller is allowed to do with a ghostkey.

A grant carries a set of scopes. The vault auto-grants itself every scope when it imports a key. Third-party apps can request access via RequestAnyAccess, which (on user approval) grants only {ReadPublic, Sign} – enough to read the public certificate and sign messages, but not enough to extract the private key or destroy the identity. Apps that need higher privileges are deliberately routed through the vault, where the user is rendering the management UI.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

ReadPublic

Read public certificate and metadata. Granted alongside Sign because every signing UI also wants to display the public cert.

Sign

Sign messages with the private key. Implies ReadPublic in practice (a verifier needs the cert), but gating is per-scope so the grant intent is explicit.

Export

Export the private signing key. Catastrophic if granted to a third-party app – the recipient becomes able to sign as the user offline. Only ever granted to the vault.

Delete

Delete the ghostkey or rewrite its label. Only ever granted to the vault.

Admin

Manage permissions for this ghostkey: grant/revoke other apps’ access. The vault gets this on import; third-party apps never get it via RequestAnyAccess.

Trait Implementations

impl Clone for GhostkeyScope

fn clone(&self) -> GhostkeyScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for GhostkeyScope

impl Debug for GhostkeyScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for GhostkeyScope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for GhostkeyScope

impl Hash for GhostkeyScope

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for GhostkeyScope

fn cmp(&self, other: &GhostkeyScope) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for GhostkeyScope

fn eq(&self, other: &GhostkeyScope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for GhostkeyScope

fn partial_cmp(&self, other: &GhostkeyScope) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for GhostkeyScope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for GhostkeyScope