Enum OpKind 

pub enum OpKind {
    RepoInit,
    HumanEnroll,
    HumanRotate,
    HumanRevoke,
    HumanRecoveryKey,
    HumanRecover,
    DaemonRotate,
    DaemonRecover,
    PolicyUpdate,
    SessionStart,
    SessionBind,
    SessionIsolate,
    SessionEnd,
    CapAttenuate,
    CapRevoke,
    LeaseAcquire,
    LeaseRelease,
    LeaseRenew,
    LeaseInterest,
    ChangePropose,
    ChangeWithdraw,
    ChangeIntegrate,
    ChangeIntegrateBatch,
    Approve,
    Reject,
    Observe,
    Taint,
    ImportExternal,
    ImportUnmediated,
    BridgePush,
    Freeze,
    Unfreeze,
    Negotiate,
    Redact,
}

Operation types. Deserialization rejects anything not listed here, which makes every scope check deny-by-default.

Variants

RepoInit

HumanEnroll

HumanRotate

HumanRevoke

HumanRecoveryKey

HumanRecover

DaemonRotate

DaemonRecover

PolicyUpdate

SessionStart

SessionBind

SessionIsolate

SessionEnd

CapAttenuate

CapRevoke

LeaseAcquire

LeaseRelease

LeaseRenew

LeaseInterest

ChangePropose

ChangeWithdraw

ChangeIntegrate

ChangeIntegrateBatch

Approve

Reject

Observe

Taint

ImportExternal

ImportUnmediated

BridgePush

Freeze

Unfreeze

Negotiate

Redact

Implementations

impl OpKind

pub fn as_str(self) -> &'static str

pub fn agent_grantable(self) -> bool

The only operation types a capability can ever grant to an agent. Everything else (policy, keys, approvals, imports, revocation of others, redaction, freezing) is reserved for humans or the daemon and cannot be granted by any policy.

Trait Implementations

impl Clone for OpKind

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for OpKind

impl Debug for OpKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OpKind

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for OpKind

impl Hash for OpKind

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for OpKind

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

fn clamp_to<R>(self, range: R) -> Self

where Self: Sized, R: ClampBounds<Self>,

🔬This is a nightly-only experimental API. (clamp_to)

Restrict a value to a certain range.

impl PartialEq for OpKind

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for OpKind

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for OpKind

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for OpKind