Struct PermissionSet 

pub struct PermissionSet { /* private fields */ }

The effective permissions of an identity.

Implementations

impl PermissionSet

pub fn new(superuser: bool, grants: impl IntoIterator<Item = String>) -> Self

Builds a set from granted permission strings, with no per-user overrides. A superuser short-circuits every check regardless of the listed grants.

pub fn with_overrides( superuser: bool, grants: impl IntoIterator<Item = String>, allow: impl IntoIterator<Item = String>, deny: impl IntoIterator<Item = String>, ) -> Self

Builds a set from role grants plus per-user overrides: allow forces a permission on and deny forces it off, both taking precedence over the role grants (deny over allow).

pub fn is_superuser(&self) -> bool

pub fn allows(&self, needed: &str) -> bool

Whether this identity is allowed needed. A superuser is always allowed. Otherwise a user override decides first (deny wins, then allow); with no override the role grants decide.

pub fn grants(&self) -> impl Iterator<Item = &str>

The raw grants, for inspection and rendering. Excludes the superuser flag.

Trait Implementations

impl Clone for PermissionSet

fn clone(&self) -> PermissionSet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionSet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionSet

fn default() -> PermissionSet

Returns the “default value” for a type.