Struct Acl 

pub struct Acl {
    pub dirty: bool,
    pub cid: Option<Cid>,
    /* private fields */
}

An access control list for an ma entity.

Create with Acl::new_from_yaml or Acl::new_from_cid.

Fields

dirty: bool

true when entries have changed since last publish.

cid: Option<Cid>

CID of the last successfully published DAG-CBOR node.

Implementations

impl Acl

pub fn new_from_yaml(yaml: &str) -> Result<Self>

Parse an ACL from a YAML string.

The YAML must contain an acl: key whose value is a sequence of strings. Any unrecognised entry is a hard error (fail-fast).

Errors

Returns Error::Acl if the YAML is malformed or any entry is invalid.

pub fn new_from_cid(cid: Cid, data: &[u8]) -> Result<Self>

Reconstruct an ACL from a previously published YAML payload and its CID.

Marks the ACL as clean (dirty = false) and records the CID.

Errors

Returns Error::Acl if the bytes are not valid UTF-8 or the YAML is malformed.

pub fn allow(&mut self, did_str: &str) -> Result<()>

Add an allow rule for did_str.

did_str may be a bare #fragment, did:ma:…, or did:ma:…#fragment.

Errors

Returns Error::Acl if did_str cannot be parsed.

pub fn deny(&mut self, did_str: &str) -> Result<()>

Add a deny rule for did_str.

Prefix with ! is optional — this method adds the deny semantics regardless. did_str may be #fragment, did:ma:…, or did:ma:…#fragment.

Errors

Returns Error::Acl if did_str cannot be parsed as a DID or fragment.

pub fn is_allowed(&self, did_str: &str) -> bool

Return true if did_str is permitted by this ACL.

did_str is matched as:

• did:ma:…#fragment — full DID-URL
• did:ma:… — bare identity
• #fragment — bare fragment (no identity context)

Deny always wins over allow. An identity-level deny blocks all DID-URLs under that identity.

pub fn to_yaml(&self) -> Result<String>

Serialise the ACL to a canonical YAML string.

Errors

Returns Error::Acl if serialisation fails (should not happen in practice).

pub fn mark_published(&mut self, cid: Cid, gen: u64)

Record a successful publish.

Only updates Acl::cid and clears Acl::dirty when gen matches the current generation (i.e. no mutations happened between the publish call and this confirmation).

pub fn generation(&self) -> u64

Current generation counter.

Increments on every mutating operation. Pass this value to Acl::mark_published to guard against race conditions.

Trait Implementations

impl Clone for Acl

fn clone(&self) -> Acl

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Acl

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.