Enum PrincipalKind 

pub enum PrincipalKind {
    User,
    Machine,
    Deploy,
    Group,
    Anonymous,
}

What kind of thing an identity is.

The distinction is not decorative: a Deploy key is expected to be read-only and short-lived, and a UI that cannot tell a human from a CI runner cannot show a useful key list.

Variants

User

A person.

Machine

A machine account: CI, a bot, another service.

Deploy

A deploy key: one repository, usually read-only.

Group

A group of principals (punkt 9).

A group is a principal like any other — it has an id, it can be the grantee of a Grant at any scope and level, and grant/revoke/may treat it no differently from a user (one implementation, no new grant type). What is special is only that it holds no keys and is never authenticated as: a group is a name that grants attach to, and the members of the group inherit those grants. Membership is an edge, tracked beside the identity table (AuthTable::add_to_group), not a field on the principal, so the same principal record serves a group and a user.

Anonymous

Nobody. The caller presented no key at all.

There is exactly one principal of this kind, Principal::anonymous. It is never stored in the identity table, it can never hold a key and it can never hold a grant. It exists so that “a stranger clones a public repository” is answered by AuthTable::may like every other access question, rather than by a second code path that could disagree with the first (one implementation).

Trait Implementations

impl Clone for PrincipalKind

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PrincipalKind

impl Debug for PrincipalKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PrincipalKind

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PrincipalKind

impl Hash for PrincipalKind

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for PrincipalKind

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

fn clamp_to<R>(self, range: R) -> Self

where Self: Sized, R: ClampBounds<Self>,

🔬This is a nightly-only experimental API. (clamp_to)

Restrict a value to a certain range.

impl PartialEq for PrincipalKind

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for PrincipalKind

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for PrincipalKind

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PrincipalKind