Struct RewriteOutput 

pub struct RewriteOutput {
    pub statement: Statement,
    pub column_aliases: Vec<(String, String)>,
}

Output of RbacFilter::rewrite_statement.

Carries the rewritten statement alongside the alias mapping derived from the original projection. Downstream code (e.g. the masking pass in kimberlite) uses the mapping to resolve output column names back to their source columns so masks are applied to the underlying sensitive attribute, not the user-visible alias.

Fields

statement: Statement

The rewritten SQL statement.

column_aliases: Vec<(String, String)>

Pairs of (output_column_name, source_column_name) for each projection item that survived RBAC filtering.

Bare identifiers produce pairs where both entries are equal. Aliased identifiers (SELECT ssn AS id) produce distinct output/source entries — the masking pass must key its lookup on the source entry (AUDIT-2026-04 M-7).

Trait Implementations

impl Debug for RewriteOutput

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.