Struct AuthorizationBindingV1 

pub struct AuthorizationBindingV1 {

    pub format_version: u16,
    pub recovery_era: RecoveryEra,
    pub public_security_root_digest: [u8; 32],
    pub ordering_revision: SecurityPolicyRevision,
    pub collection_id: CollectionId,
    pub collection_security_generation: CollectionSecurityGeneration,
    pub principal_id: PrincipalId,
    pub principal_generation: SecurityPrincipalGeneration,
    pub api_key_id: ApiKeyId,
    pub api_key_generation: ApiKeyGeneration,
    pub role_generations_digest: [u8; 32],
    pub quota_policy_generation: QuotaPolicyGeneration,
    pub authorized_scope_digest: [u8; 32],
}

Exact Collection-local authority used by one authenticated public request.

ordering_revision and public_security_root_digest retain the global provenance of the decision. Callers must use Self::same_local_authority for ordinary authorization equality so an unrelated Collection mutation cannot invalidate admitted work.

Fields

format_version: u16

recovery_era: RecoveryEra

public_security_root_digest: [u8; 32]

ordering_revision: SecurityPolicyRevision

collection_id: CollectionId

collection_security_generation: CollectionSecurityGeneration

principal_id: PrincipalId

principal_generation: SecurityPrincipalGeneration

api_key_id: ApiKeyId

api_key_generation: ApiKeyGeneration

role_generations_digest: [u8; 32]

quota_policy_generation: QuotaPolicyGeneration

authorized_scope_digest: [u8; 32]

Implementations

impl AuthorizationBindingV1

pub fn is_valid(self) -> bool

pub fn same_local_authority(self, other: Self) -> bool

Compares only fences that can change the authority of this exact Collection/principal/key/scope path. Global root and ordering movement remain provenance and deliberately do not participate.

pub fn same_generation_authority(self, other: Self) -> bool

Compares the local authorization revocation and mutation fences while permitting a caller to narrow or re-evaluate the admitted action/index scope. Quota owners compare quota_policy_generation separately; a quota-only change must not revoke authorization or queued resource work.

Trait Implementations

impl Clone for AuthorizationBindingV1

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AuthorizationBindingV1

impl Debug for AuthorizationBindingV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthorizationBindingV1

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AuthorizationBindingV1

impl Hash for AuthorizationBindingV1

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for AuthorizationBindingV1

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AuthorizationBindingV1

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuthorizationBindingV1