Module rbac

Module rbac 

Source
Expand description

RBAC (Role-Based Access Control) middleware and permission enforcement

This module provides middleware for enforcing role-based access control on admin endpoints, ensuring users can only perform actions they’re authorized for.

Structs§

AdminActionPermissions
Admin action to permission mapping
UserContext
User context extracted from request

Functions§

extract_user_context
Extract user context from request headers Currently supports:
get_default_user_context
Default user context for unauthenticated requests (development mode) In production, this should return None to enforce authentication
get_user_context_from_request
Helper to extract user context from request extensions
get_user_context_from_state
Helper to get user context from axum State (if stored)
rbac_middleware
RBAC middleware to enforce permissions on admin endpoints