Struct RoleHierarchy 

pub struct RoleHierarchy { /* private fields */ }

Symfony-style role hierarchy.

Define which roles inherit from which others:

use karbon_framework::security::RoleHierarchy;

let hierarchy = RoleHierarchy::new(&[
    ("ROLE_SUPER_ADMIN", &["ROLE_ADMIN"]),
    ("ROLE_ADMIN", &["ROLE_REDACTEUR"]),
    ("ROLE_REDACTEUR", &["ROLE_USER"]),
]);

// A user with ROLE_SUPER_ADMIN effectively has all roles
let resolved = hierarchy.resolve(&["ROLE_SUPER_ADMIN".to_string()]);
assert!(resolved.contains("ROLE_ADMIN"));
assert!(resolved.contains("ROLE_REDACTEUR"));
assert!(resolved.contains("ROLE_USER"));

Implementations

impl RoleHierarchy

pub fn new(entries: &[(&str, &[&str])]) -> Self

Build from a list of (role, children) pairs. Each entry means: role inherits all children roles (and their children, transitively).

pub fn resolve(&self, user_roles: &[String]) -> HashSet<String>

Resolve a set of user roles into the full set of effective roles (including all inherited roles, transitively).

pub fn has_role(&self, user_roles: &[String], required_role: &str) -> bool

Check if a user with the given roles effectively has required_role (directly or via hierarchy inheritance).

Trait Implementations

impl Clone for RoleHierarchy

fn clone(&self) -> RoleHierarchy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RoleHierarchy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.