Struct AuthorizationPolicy 

pub struct AuthorizationPolicy { /* private fields */ }

Implementations

impl AuthorizationPolicy

pub fn decide_accepted_work( &self, request: AuthorizationRequest, existing: Option<&AuthorizationDecision>, accepted: &AuthorizationDecision, now: OffsetDateTime, ttl: AuthorizationDecisionTtl, ) -> Result<AuthorizationDecisionPlan, DomainError>

Admit completion of work whose original authorization is sealed in a durable domain record. The current evidence remains tied to the exact principal, scope and admission decision even after grant revocation.

impl AuthorizationPolicy

pub fn empty() -> Self

pub fn rehydrate( events: &[AuthorizationPolicyEvent], ) -> Result<Self, DomainError>

pub const fn version(&self) -> AuthorizationPolicyVersion

pub fn id(&self) -> Option<&AuthorizationPolicyId>

pub fn owner(&self) -> Option<&AuthenticatedPrincipal>

pub fn decisions(&self) -> impl Iterator<Item = &AuthorizationDecision>

pub fn grants(&self) -> impl Iterator<Item = &AuthorizationGrant>

pub fn revoked_grant_ids(&self) -> impl Iterator<Item = &AuthorizationGrantId>

pub fn separation_rules(&self) -> impl Iterator<Item = SeparationRule> + '_

pub fn decide_open( &self, policy_id: AuthorizationPolicyId, owner: AuthenticatedPrincipal, separation_rules: Vec<SeparationRule>, opened_at: OffsetDateTime, ) -> Result<Option<AuthorizationPolicyEvent>, DomainError>

pub fn decide_authorize( &self, request: AuthorizationRequest, now: OffsetDateTime, ttl: AuthorizationDecisionTtl, ) -> Result<AuthorizationDecisionPlan, DomainError>

pub fn decide_authorize_with_decisions( &self, request: AuthorizationRequest, existing: Option<&AuthorizationDecision>, approval: Option<&AuthorizationDecision>, now: OffsetDateTime, ttl: AuthorizationDecisionTtl, ) -> Result<AuthorizationDecisionPlan, DomainError>

pub fn decide_issue( &self, issuer: &AuthenticatedPrincipal, grant: AuthorizationGrant, now: OffsetDateTime, ) -> Result<Option<AuthorizationPolicyEvent>, DomainError>

pub fn decide_revoke( &self, issuer: &AuthenticatedPrincipal, grant_id: &AuthorizationGrantId, reason: AuthorizationRevocationReason, now: OffsetDateTime, ) -> Result<Option<AuthorizationPolicyEvent>, DomainError>

pub fn permits( &self, principal: &AuthenticatedPrincipal, action: AuthorizationAction, scope: &AuthorizationScope, now: OffsetDateTime, ) -> bool

pub fn apply( &mut self, event: AuthorizationPolicyEvent, ) -> Result<(), DomainError>

pub fn apply_projected( &mut self, event: AuthorizationPolicyEvent, approval: Option<&AuthorizationDecision>, ) -> Result<(), DomainError>

pub fn apply_projected_with_authorities( &mut self, event: AuthorizationPolicyEvent, approval: Option<&AuthorizationDecision>, accepted: Option<&AuthorizationDecision>, ) -> Result<(), DomainError>

pub fn restore_version( &mut self, version: AuthorizationPolicyVersion, ) -> Result<(), DomainError>

Trait Implementations

impl Clone for AuthorizationPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthorizationPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthorizationPolicy

fn default() -> Self

Returns the “default value” for a type.

impl Eq for AuthorizationPolicy

impl PartialEq for AuthorizationPolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AuthorizationPolicy