Enum CapabilityEntry 

pub enum CapabilityEntry {
    Deny,
    Allow(BTreeSet<String>),
    Grant(Vec<String>),
}

Capability set for a principal in an AclMap, or a grantee list for a capability-grant entry.

Serialises as:

• null → Deny
• YAML sequence → Allow
• comma-separated string → Grant

Variants

Deny

Explicit deny. Wins over any wildcard allow for the same principal.

Allow(BTreeSet<String>)

Allow the listed capabilities. ["*"] grants all capabilities.

Grant(Vec<String>)

Capability-grant entry: the listed group/DID refs may use this capability. Stored as a comma-separated string in YAML. Resolved lazily by the runtime’s async ACL checker; check_cap skips these.

Implementations

impl CapabilityEntry

pub fn from_caps<I, S>(caps: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Construct an Allow entry from an iterator of capability name strings.

pub fn has(&self, cap: &str) -> bool

Return true if this entry grants cap. "*" in the capability set grants any capability.

pub fn is_deny(&self) -> bool

Return true if this is an explicit deny.

pub fn grantees(&self) -> Option<&[String]>

Return the grantee refs if this is a Grant entry.

Trait Implementations

impl Clone for CapabilityEntry

fn clone(&self) -> CapabilityEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CapabilityEntry

fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl PartialEq for CapabilityEntry

fn eq(&self, other: &CapabilityEntry) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CapabilityEntry

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl Eq for CapabilityEntry

impl StructuralPartialEq for CapabilityEntry