Struct Principal 

pub struct Principal {
    pub id: String,
    pub name: String,
    pub role: Role,
    pub kind: PrincipalKind,
}

The resolved caller for a request.

Fields

id: String

name: String

role: Role

kind: PrincipalKind

Implementations

impl Principal

pub fn system_admin() -> Self

The implicit principal used when auth is disabled.

pub fn can_admin(&self) -> bool

pub fn can_manage_registry(&self) -> bool

Manage the registry: vehicles + watchlist.

pub fn can_operate_gate(&self) -> bool

Operate the gate: visitor check-in/out, create passes, confirm/reject entries.

pub fn can_ingest(&self) -> bool

Post perception/ANPR events into the entry pipeline (machine clients + admins).

pub fn can_view(&self) -> bool

Read the entry surface. Every authenticated principal can read.

pub fn require(&self, allowed: bool, action: &str) -> AppResult<()>

Assert a capability, returning 403 with a useful message otherwise.

Trait Implementations

impl Clone for Principal

fn clone(&self) -> Principal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Principal

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromRequestParts<AppState> for Principal

type Rejection = AppError

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, st: &AppState, ) -> Result<Self, Self::Rejection>

Perform the extraction.