Struct CapabilityService 

pub struct CapabilityService { /* private fields */ }

Service for managing and validating capabilities

Implementations

impl CapabilityService

pub fn new() -> Self

Create a new capability service with default config

pub fn with_config(config: CapabilityConfig) -> Self

Create a capability service with custom config

pub fn check_capability( &self, cap_set: &CapabilitySet, resource_type: &ResourceType, action: &Action, scope: Option<&str>, ) -> bool

Check if a capability set allows a specific action

pub fn grant_capabilities( &self, existing_caps: &CapabilitySet, new_caps: Vec<Capability>, ) -> CapabilitySet

Grant capabilities to a principal (returns updated capability set)

pub fn revoke_capabilities( &self, existing_caps: &CapabilitySet, caps_to_revoke: Vec<Capability>, ) -> CapabilitySet

Revoke capabilities from a principal

pub fn attenuate_capabilities( &self, cap_set: &CapabilitySet, restrictions: Vec<Capability>, ) -> CapabilitySet

Create an attenuated capability set for safer operations

pub fn create_preset_capability_set( preset: PresetCapabilitySet, ) -> CapabilitySet

Create predefined capability sets for common use cases