Enum TargetFilter 

#[non_exhaustive]
pub enum TargetFilter {
    All,
    DnPattern(String),
    ObjectClass(String),
    HasAttribute(String),
    And(Vec<TargetFilter>),
    Or(Vec<TargetFilter>),
    Not(Box<TargetFilter>),
    Raw(String),
}

Target filter for ACIs.

Conservatively partially ordered by “matches more entries” (wider = greater):

• All is greatest
• And narrows (more conjuncts = less coverage)
• Or widens (more disjuncts = more coverage)
• Raw is incomparable with everything (opaque)
• Different leaf variants are incomparable without schema knowledge

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

All

Match all entries

DnPattern(String)

Match DN pattern (supports wildcards)

ObjectClass(String)

Match entries with specific object class

HasAttribute(String)

Match entries with specific attribute

And(Vec<TargetFilter>)

Combination of filters (AND)

Or(Vec<TargetFilter>)

Combination of filters (OR)

Not(Box<TargetFilter>)

Negation filter — matches entries that do NOT match the inner filter

Raw(String)

Opaque LDAP filter string, passed through verbatim in generation.

Implementations

impl TargetFilter

pub fn matches(&self, entry: &LdapEntry) -> bool

Check if an entry matches this filter.

pub fn has_member_exclusion(&self, group_dn: &str) -> bool

Whether this filter contains a !(memberOf=<group_dn>) negation that excludes members of the given group.

pub fn has_filter_exclusion(&self, pattern: &str) -> bool

Whether this filter contains a Not(inner) where inner matches the given pattern (case-insensitive substring on Raw variants). Generalizes has_member_exclusion to arbitrary filter negations, e.g. has_filter_exclusion("ipaPermissionType=SYSTEM").

Trait Implementations

impl Clone for TargetFilter

fn clone(&self) -> TargetFilter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TargetFilter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for TargetFilter

impl PartialEq for TargetFilter

fn eq(&self, other: &TargetFilter) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for TargetFilter

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for TargetFilter