Struct AccessRule 

pub struct AccessRule {
    pub id: String,
    pub description: Option<String>,
    pub effect: AccessEffect,
    pub subjects: Vec<String>,
    pub groups: Vec<String>,
    pub actions: Vec<String>,
    pub agents: Vec<String>,
    pub roles: Vec<String>,
    pub match_labels: BTreeMap<String, String>,
}

One attribute rule.

Dimension semantics:

• subjects / groups: the rule applies to a principal when its subject is listed in subjects (or subjects contains "*"), or it belongs to any listed group. When both lists are empty the rule applies to every principal, including unauthenticated ones.
• actions: required, non-empty. Entries are exact action names, "prefix.*" wildcards, or "*".
• agents / roles / match_labels: resource selectors. Each specified selector must match (logical AND across dimensions); within agents and roles any listed value matches (logical OR), and "*" matches every value. Empty selectors leave that dimension unconstrained. A rule with all three empty matches every resource, including action checks that have no resource at all (e.g. gating.decide).

Fields

id: String

description: Option<String>

effect: AccessEffect

subjects: Vec<String>

groups: Vec<String>

actions: Vec<String>

agents: Vec<String>

roles: Vec<String>

match_labels: BTreeMap<String, String>

Implementations

impl AccessRule

pub fn has_resource_selector(&self) -> bool

True when the rule constrains the resource in any way.

Trait Implementations

impl Clone for AccessRule

fn clone(&self) -> AccessRule

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AccessRule

fn default() -> AccessRule

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AccessRule

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AccessRule

impl PartialEq for AccessRule

fn eq(&self, other: &AccessRule) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AccessRule

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AccessRule