Struct AuthState 

pub struct AuthState { /* private fields */ }

A cloneable snapshot of the auth state shared between Database and every mounted Table. Cloning is cheap (one Arc bump).

The require_auth flag is read live from the catalog on every check, so enable_auth / offline-disable are reflected immediately. The principal is the open-time cached value; daemons that need per-request principals should swap in their own TableAuthChecker.

Implementations

impl AuthState

pub fn new(require_auth: bool, principal: Option<Principal>) -> Self

Create a new auth state. require_auth is the initial catalog value; principal is the cached principal (if any).

pub fn disabled() -> Self

Create a credentialless auth state (no enforcement).

pub fn require_auth(&self) -> bool

Whether enforcement is currently active.

pub fn set_require_auth(&self, value: bool)

Update the require_auth flag. Called by Database when the catalog flag changes (e.g. enable_auth).

pub fn principal(&self) -> Option<Principal>

A clone of the cached principal, if any.

pub fn set_principal(&self, principal: Option<Principal>)

Replace the cached principal. Called by Database::open_with_credentials, enable_auth, and refresh_principal.

pub fn require(&self, table_name: &str, perm: RequiredPermission) -> Result<()>

Enforcement check: if require_auth is true, verify the cached principal satisfies perm for table_name. On credentialless databases, this is a no-op (Ok(())).

This is the primary entry point called by Table and Transaction enforcement points.

Trait Implementations

impl Clone for AuthState

fn clone(&self) -> AuthState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.