Enum AccessControl 

pub enum AccessControl {
    AuthControlled,
    Ownable2Step {
        owner: AccountId,
    },
    Rbac {
        owner: AccountId,
        authority_role: Option<RoleSymbol>,
    },
}

Access control configuration for account components.

Each variant expands into the set of AccountComponents that implement that access control choice plus the matching Authority component. The Authority is auto-yielded so callers don’t need to remember to install it separately and so that the authority discriminator stays in sync with the chosen access mode.

• AccessControl::AuthControlled yields just Authority::AuthControlled.
• AccessControl::Ownable2Step yields Ownable2Step + Authority::OwnerControlled.
• AccessControl::Rbac yields Ownable2Step + RoleBasedAccessControl + an Authority. The authority_role field selects which authority kind is installed:
  • None → Authority::OwnerControlled (the top-level owner gates set_* operations).
  • Some(role) → [Authority::RbacControlled { role }] (any holder of role gates set_* operations).

Pass to AccountBuilder::with_components to install the access control components on the account:

use miden_protocol::account::AccountBuilder;
use miden_standards::account::access::AccessControl;
AccountBuilder::new(init_seed)
    .with_components(AccessControl::Rbac { owner, authority_role: None });

For accounts that don’t use the AccessControl convenience but want to install the Authority component directly, the Authority enum can be passed via AccountBuilder::with_component.

Variants

AuthControlled

No external access control component is installed; access decisions are gated solely by the account’s auth component.

Ownable2Step

Two-step ownership transfer with the provided initial owner. Authority for set_* operations is fixed to the registered owner.

Fields

owner: AccountId

Rbac

Role-based access control. Includes Ownable2Step internally; the provided owner becomes the top-level RBAC authority (the account’s owner).

authority_role controls which authority is installed alongside RBAC:

• None (default) → Authority::OwnerControlled: the top-level owner is the sole authority for set_* operations (set_mint_policy, set_burn_policy, metadata setters). RBAC roles can still be granted/revoked but they do not directly gate the authority-protected procedures.
• Some(role) → [Authority::RbacControlled { role }]: any account holding role becomes a valid authority for set_* operations. Role membership is managed through the standard RBAC API on the RoleBasedAccessControl component.

Fields

owner: AccountId

authority_role: Option<RoleSymbol>

Trait Implementations

impl Clone for AccessControl

fn clone(&self) -> AccessControl

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessControl

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for AccessControl

impl IntoIterator for AccessControl

fn into_iter(self) -> <AccessControl as IntoIterator>::IntoIter

Yields the AccountComponents implementing this access control configuration, in the order they must be installed on the account. The matching Authority component is always included.

type Item = AccountComponent

The type of the elements being iterated over.

type IntoIter = IntoIter<AccountComponent>

Which kind of iterator are we turning this into?

impl PartialEq for AccessControl

fn eq(&self, other: &AccessControl) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AccessControl