Struct CallerEnrollmentGate 

pub struct CallerEnrollmentGate { /* private fields */ }

Immutable caller-enrollment policy for the built-in configuration gate.

Explicit actors are matched by their resolved actor id. The implicit anonymous actor is governed separately by grant_unattributed, so a list entry named local can never accidentally enroll an unattributed caller.

Implementations

impl CallerEnrollmentGate

pub fn new(granted_actors: Vec<String>, grant_unattributed: bool) -> Self

Construct a deterministic enrollment policy.

pub fn with_write_denials( granted_actors: Vec<String>, grant_unattributed: bool, deny_writes_for: Vec<String>, ) -> Self

Add whole-ID, case-sensitive write restrictions after enrollment. * matches zero or more characters, including :; every other character is literal. No segment hierarchy or escape syntax applies. An anonymous caller admitted by grant_unattributed is restricted if its fallback ID local matches, independently of attributed enrollment. Empty restrictions preserve Self::new’s behavior and fingerprint. Invalid programmatic policy fails every check closed; config-file loaders should call Self::validate_write_denials to report it before startup.

pub fn validate_write_denials( patterns: &[String], ) -> Result<(), GateValidationError>

Validate the bounded, literal-except-* pattern format without changing it.

Trait Implementations

impl Clone for CallerEnrollmentGate

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CallerEnrollmentGate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Gate for CallerEnrollmentGate

fn check(&self, req: &GateRequest) -> Result<GateDecision, GateError>

Evaluate req, returning an allow/deny decision or a backend GateError.

fn impl_name(&self) -> &'static str

Return the audit backend name; defaults to std::any::type_name::<Self>().

fn configuration_fingerprint(&self) -> Option<&str>

Return an opaque, deterministic fingerprint when this gate’s policy must participate in warm-daemon identity.

fn check_mailbox_read( &self, _req: &GateRequest, _owner: &ActorRef, ) -> Result<GateDecision, GateError>

Evaluate the separate capability to read another actor’s mailbox.