Struct IdentityPerms 

pub struct IdentityPerms {
    pub admin: bool,
    pub manage_acl: bool,
    pub migrate: bool,
    pub all_tables: TablePerms,
    pub per_table: Vec<(u64, TablePerms)>,
}

Effective permission set carried by a single identity.

per_table is encoded as a Vec<(TableFingerprint, TablePerms)> so the type maps cleanly onto Candid (no HashMap on the wire). Lookup happens via linear scan; the table count is bounded by the schema.

Fields

admin: bool

Bypass all table checks. Does NOT imply manage_acl or migrate.

manage_acl: bool

Permission to grant/revoke perms and add/remove identities.

migrate: bool

Permission to run Dbms::migrate().

all_tables: TablePerms

Table perms applied to every table. Unioned with per_table.

per_table: Vec<(u64, TablePerms)>

Per-table perms. Additive over all_tables.

Implementations

impl IdentityPerms

pub fn fully_permissive() -> IdentityPerms

Fully-permissive perms, used by NoAccessControl.

pub fn grants_table(&self, table: u64, required: TablePerms) -> bool

Returns whether this identity is granted required on table.

pub fn apply_grant(&mut self, grant: PermGrant)

Applies grant in place. Idempotent.

pub fn apply_revoke(&mut self, revoke: PermRevoke)

Applies revoke in place. Idempotent. Removes empty per-table entries.

pub fn is_empty(&self) -> bool

True when the identity carries no perms whatsoever.

Trait Implementations

impl CandidType for IdentityPerms

fn _ty() -> Type

fn _ty_doc() -> TypeDoc

fn id() -> TypeId

fn idl_serialize<__S>( &self, __serializer: __S, ) -> Result<(), <__S as Serializer>::Error>

where __S: Serializer,

fn ty() -> Type

impl Clone for IdentityPerms

fn clone(&self) -> IdentityPerms

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IdentityPerms

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for IdentityPerms

fn default() -> IdentityPerms

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for IdentityPerms

fn deserialize<__D>( __deserializer: __D, ) -> Result<IdentityPerms, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for IdentityPerms

fn eq(&self, other: &IdentityPerms) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for IdentityPerms

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for IdentityPerms

impl StructuralPartialEq for IdentityPerms