Struct PrivilegedAccessManager 

pub struct PrivilegedAccessManager { /* private fields */ }

Privileged access manager

Manages privileged access requests, monitoring, and enforcement

Implementations

impl PrivilegedAccessManager

pub fn new( config: PrivilegedAccessConfig, mfa_storage: Option<Arc<dyn MfaStorage>>, justification_storage: Option<Arc<dyn JustificationStorage>>, ) -> Self

Create a new privileged access manager

pub async fn request_privileged_access( &self, user_id: Uuid, requested_role: PrivilegedRole, justification: String, business_need: Option<String>, manager_approval: Option<Uuid>, ) -> Result<PrivilegedAccessRequest, Error>

Request privileged access

pub async fn approve_manager( &self, request_id: Uuid, approver_id: Uuid, ) -> Result<(), Error>

Approve privileged access request (manager approval)

pub async fn approve_security( &self, request_id: Uuid, approver_id: Uuid, expiration_days: u64, ) -> Result<(), Error>

Approve privileged access request (security approval)

pub async fn deny_request( &self, request_id: Uuid, reason: String, ) -> Result<(), Error>

Deny privileged access request

pub async fn check_mfa_compliance(&self, user_id: Uuid) -> Result<bool, Error>

Check MFA compliance for a user

pub async fn record_action( &self, user_id: Uuid, action_type: PrivilegedActionType, resource: Option<String>, details: Option<String>, ip_address: Option<String>, user_agent: Option<String>, session_id: Option<String>, ) -> Result<Uuid, Error>

Record a privileged action

pub async fn start_session( &self, session_id: String, user_id: Uuid, role: PrivilegedRole, ip_address: Option<String>, user_agent: Option<String>, ) -> Result<(), Error>

Start a privileged session

pub async fn update_session_activity( &self, session_id: &str, ) -> Result<(), Error>

Update session activity

pub async fn end_session(&self, session_id: &str) -> Result<(), Error>

End a privileged session

pub async fn cleanup_expired_sessions(&self) -> Result<Vec<String>, Error>

Check for expired sessions and clean them up

pub async fn get_user_actions( &self, user_id: Uuid, ) -> Result<Vec<PrivilegedAction>, Error>

Get all privileged actions for a user

pub async fn get_active_sessions(&self) -> Result<Vec<PrivilegedSession>, Error>

Get all active privileged sessions

pub async fn get_request( &self, request_id: Uuid, ) -> Result<Option<PrivilegedAccessRequest>, Error>

Get access request by ID

pub async fn get_user_requests( &self, user_id: Uuid, ) -> Result<Vec<PrivilegedAccessRequest>, Error>

Get all requests for a user