Struct RbacConfigNote 

pub struct RbacConfigNote { /* private fields */ }

An RbacConfig note: triggers a RoleBasedAccessControl management action on the account that consumes it.

A single note script dispatches on a selector in the note’s storage to one of the component’s management procedures (grant_role, revoke_role, set_role_admin, renounce_role). All authorization is enforced by those procedures against the note sender, so the note carries no assets and its authorization is bound to sender at creation time.

The note is always public and tagged for account — the account carrying the RoleBasedAccessControl component whose role graph is being managed. The sender is the account authorized for the selected action: a member of the role’s effective admin role for GrantRole / RevokeRole / SetRoleAdmin, or the role holder itself for RenounceRole.

The note is bound to the target account by a NetworkAccountTarget attachment: the script asserts that the consuming account matches that target before dispatching, so the note cannot be consumed by a third-party account that merely accepts its sender. The binding also makes the note a valid AccountTargetNetworkNote, routing it to account for network execution.

Construct one with the builder; convert it into a protocol Note infallibly via Note::from.

Security considerations

A created note is an unordered, unexpiring, uncancellable instruction — treat it as a standing capability and do not create role-management notes ahead of need. Consumption order is chosen by whoever consumes the note, so when rotating a role, wait for the successor’s grant to commit before issuing any revoke or renounce (a note that fails because its sender currently lacks the role stays pending and revives if the sender regains it).

Implementations

impl RbacConfigNote

pub fn builder() -> RbacConfigNoteBuilder

Builds a new RbacConfigNote that applies config to account.

The note is bound to account by a NetworkAccountTarget attachment that the builder appends unless the caller already supplied one for account.

Errors

Returns an error if:

• account is not a public account (the note is bound to it via a NetworkAccountTarget, which requires a public target).
• the attachments carry a NetworkAccountTarget for an account other than account.
• the attachments exceed their protocol limit (see NoteAttachments::new); the target attachment occupies one of the available slots when the caller does not supply it.

impl RbacConfigNote

pub const MAX_NUM_STORAGE_ITEMS: usize = 4

Upper bound on the number of storage items of an RbacConfig note.

The layout is variable: GrantRole / RevokeRole use 4 items ([selector, role_symbol, account_suffix, account_prefix]), SetRoleAdmin uses 3, and RenounceRole uses 2.

pub fn script() -> NoteScript

Returns the script of the RbacConfig note.

pub fn script_root() -> NoteScriptRoot

Returns the RbacConfig note script root.

pub fn sender(&self) -> AccountId

Returns the account ID of the note’s sender (the account authorized for the action).

pub fn account(&self) -> AccountId

Returns the account ID of the managed account (the account the note is tagged for).

pub fn config(&self) -> &RbacConfig

Returns the management action carried by the note.

pub fn serial_number(&self) -> Word

Returns the note’s serial number.

pub fn attachments(&self) -> &NoteAttachments

Returns the attachments carried by the note, which always include a NetworkAccountTarget.

Trait Implementations

impl Clone for RbacConfigNote

fn clone(&self) -> RbacConfigNote

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RbacConfigNote

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl From<RbacConfigNote> for Note

fn from(note: RbacConfigNote) -> Note

Converts to this type from the input type.

impl From<RbacConfigNote> for AccountTargetNetworkNote

fn from(note: RbacConfigNote) -> AccountTargetNetworkNote

Converts to this type from the input type.

impl NoteConsumptionCost for RbacConfigNote

fn consumption_cycles() -> u32

Cycles of the canonical network-account transaction consuming this note (maximum across the benchmarked execution paths - an estimate, not a worst case).

fn created_notes() -> Vec<NoteScriptRoot>

Script roots of all the notes this note’s consumption is expected to create.