Struct ResourcePolicy 

pub struct ResourcePolicy {
    pub resource_pattern: String,
    pub required_permission: Permission,
    pub required_roles: Vec<String>,
    pub required_attributes: Vec<(String, String)>,
    pub min_clearance: u8,
    pub deny_list: Vec<String>,
    pub allow_list: Vec<String>,
    pub effect: PolicyEffect,
}

A policy governing which subjects may perform an operation on a resource.

Fields

resource_pattern: String

Glob-like pattern: "*", "dir/*", "*.json", or exact path.

required_permission: Permission

The operation guarded by this policy.

required_roles: Vec<String>

Subject must hold at least one of these roles (incl. inherited). Empty = any role is accepted.

required_attributes: Vec<(String, String)>

All of these key-value attributes must be present on the subject.

min_clearance: u8

Subject’s clearance_level must be >= this value.

deny_list: Vec<String>

Subjects in this list are always denied, regardless of other checks.

allow_list: Vec<String>

Subjects in this list are always allowed (overrides deny_list).

effect: PolicyEffect

Trait Implementations

impl Clone for ResourcePolicy

fn clone(&self) -> ResourcePolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResourcePolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.