Enum Permission 

pub enum Permission {
    All,
    Select {
        table: String,
    },
    Insert {
        table: String,
    },
    Update {
        table: String,
    },
    Delete {
        table: String,
    },
    SelectColumns {
        table: String,
        columns: Vec<String>,
    },
    InsertColumns {
        table: String,
        columns: Vec<String>,
    },
    UpdateColumns {
        table: String,
        columns: Vec<String>,
    },
    Ddl,
    Admin,
}

A permission granted to a role. Mirrors SQL GRANT / REVOKE.

Variants

All

All permissions on all tables (GRANT ALL).

Select

SELECT on a specific table.

Fields

table: String

Insert

INSERT on a specific table.

Fields

table: String

Update

UPDATE on a specific table.

Fields

table: String

Delete

DELETE on a specific table.

Fields

table: String

SelectColumns

SELECT limited to named columns.

Fields

table: String

columns: Vec<String>

InsertColumns

INSERT limited to named columns.

Fields

table: String

columns: Vec<String>

UpdateColumns

UPDATE limited to named columns.

Fields

table: String

columns: Vec<String>

Ddl

DDL: CREATE / DROP / ALTER TABLE.

Admin

Admin: CREATE USER / GRANT / REVOKE / CREATE ROLE.

Implementations

impl Permission

pub fn satisfies(&self, required: &Permission) -> bool

Check whether this permission satisfies a required permission.

All satisfies every non-admin permission (DDL + all table-level operations) but does not satisfy Admin — user/role management is gated behind is_admin = true on the principal, not grantable via Permission::All (spec §9 decision 2). Select { table: "*" } is not wildcarded (it matches a table literally named *).

Trait Implementations

impl Clone for Permission

fn clone(&self) -> Permission

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Permission

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Permission

fn deserialize<__D>( __deserializer: __D, ) -> Result<Permission, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Permission

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for Permission

impl PartialEq for Permission

fn eq(&self, other: &Permission) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Permission

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Permission