Enum EngineError 

pub enum EngineError {
    CapabilityDenied {
        subject: ObjectId,
        target: ObjectId,
        operation: Operation,
        reason: String,
    },
    ExposureRestriction {
        label: ExposureLabel,
        target: ObjectId,
    },
    Identity(String),
    Context(String),
    Token(TokenError),
    TokenOperation(String),
    Policy(String),
    MissingRequiredDesignation {
        target: ObjectId,
        operation: Operation,
        label: String,
    },
    UnknownLabelInPolicy {
        target: ObjectId,
        operation: Operation,
        label: String,
    },
    SchemaPolicyMismatch(String),
    Resolver(ResolverError),
    ChainCheckFailed {
        subject: ObjectId,
        ancestor: ObjectId,
        target: ObjectId,
        operation: Operation,
        reason: ChainCheckFailure,
    },
}

Errors from the capability engine.

Variants

CapabilityDenied

Capability request denied by policy.

Fields

subject: ObjectId

target: ObjectId

operation: Operation

reason: String

ExposureRestriction

Capability request denied due to exposure restriction.

Fields

label: ExposureLabel

target: ObjectId

Identity(String)

Identity token operation failed.

Context(String)

Context token operation failed.

Token(TokenError)

Token error from underlying token crate.

TokenOperation(String)

Token creation or verification failed.

Policy(String)

Policy backend error.

MissingRequiredDesignation

A required designation declared in the schema was not supplied at mint time (neither by the policy declaration nor by the caller).

Fields

target: ObjectId

operation: Operation

label: String

UnknownLabelInPolicy

A static designation declared in policy references a label that does not appear in the target’s schema for the matched operation. Surfaced at engine construction.

Fields

target: ObjectId

operation: Operation

label: String

SchemaPolicyMismatch(String)

Cross-validation between policy and schema failed at engine construction. Either a policy-declared static designation references an unknown label (see EngineError::UnknownLabelInPolicy) or another structural mismatch was detected.

Resolver(ResolverError)

A designation resolver failed during a mint_with_context call.

ChainCheckFailed

The mint failed the delegated identity chain check: an ancestor of subject either does not hold a grant for (target, operation), or holds a grant whose static designations are not all present in the capability being minted. This enforces “sub-identity capabilities ⊆ parent identity capabilities” transitively, including the per-grant designation envelope.

Fields

subject: ObjectId

ancestor: ObjectId

target: ObjectId

operation: Operation

reason: ChainCheckFailure

Trait Implementations

impl Debug for EngineError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for EngineError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for EngineError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<ResolverError> for EngineError

fn from(source: ResolverError) -> Self

Converts to this type from the input type.

impl From<TokenError> for EngineError

fn from(source: TokenError) -> Self

Converts to this type from the input type.