Struct First 

pub struct First<G> { /* private fields */ }

Try policies in order and grant the value paired with the first one that accepts. When none accepts, the last policy’s reason is returned, so put the broadest policy last.

use kunobi_daemon::{
    ProcessId,
    peer::{Credentials, ExpectedProcess, First, Policy, SameUser},
};

#[derive(Clone, Debug, PartialEq)]
enum View { Full, Redacted }

let app = ProcessId::new(42);
let policy = First::new()
    .then(ExpectedProcess::new(move || app), View::Full)
    .then(SameUser, View::Redacted);

assert_eq!(policy.grant(&Credentials::new(app, true)), Ok(View::Full));
assert_eq!(policy.grant(&Credentials::new(ProcessId::new(7), true)), Ok(View::Redacted));
assert!(policy.grant(&Credentials::new(app, false)).is_err());

Implementations

impl<G: Clone + Send + Sync + 'static> First<G>

pub fn new() -> Self

An empty list, which rejects every connection with Rejected::NoPolicy.

pub fn then<P>(self, policy: P, grant: G) -> Self

where P: Policy + Send + Sync + 'static,

Grant grant when policy accepts and no earlier policy did.

Trait Implementations

impl<G> Debug for First<G>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<G> Default for First<G>

fn default() -> Self

Returns the “default value” for a type.

impl<G> Policy for First<G>

type Grant = G

What an accepted connection is allowed, in the consumer’s own terms.

fn grant(&self, credentials: &Credentials) -> Result<G, Rejected>

Grant access or say why not. Runs on the accepting task, so it must not block or perform I/O: read state the consumer keeps current elsewhere.