Struct CapabilitySet 

pub struct CapabilitySet {
    pub capabilities: Vec<Capability>,
    pub metadata: Option<HashMap<String, Value>>,
}

A set of capabilities granted to a principal

Fields

capabilities: Vec<Capability>

The capabilities in this set

metadata: Option<HashMap<String, Value>>

Optional metadata about this capability set

Implementations

impl CapabilitySet

pub fn new() -> Self

Create a new empty capability set

pub fn with_metadata(metadata: HashMap<String, Value>) -> Self

Create a capability set with metadata

pub fn add_capability(&mut self, capability: Capability)

Add a capability to this set

pub fn remove_capability(&mut self, capability: &Capability)

Remove a capability from this set

pub fn has_capability(&self, capability: &Capability) -> bool

Check if this set contains a specific capability

pub fn allows( &self, resource_type: &ResourceType, action: &Action, scope: Option<&str>, ) -> bool

Check if this set allows a specific action on a resource

pub fn capabilities_for_resource( &self, resource_type: &ResourceType, ) -> Vec<&Capability>

Get all capabilities for a specific resource type

pub fn attenuate(&self, restrictions: Vec<Capability>) -> CapabilitySet

Create an attenuated capability set (more restrictive)

pub fn union(&self, other: &CapabilitySet) -> CapabilitySet

Combine this capability set with another (union)

pub fn intersection(&self, other: &CapabilitySet) -> CapabilitySet

Create intersection of this set with another

pub fn is_empty(&self) -> bool

Check if this set is empty

pub fn len(&self) -> usize

Get the number of capabilities

Trait Implementations

impl Clone for CapabilitySet

fn clone(&self) -> CapabilitySet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilitySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CapabilitySet

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CapabilitySet

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CapabilitySet

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.