Struct NacmCommandRule 

pub struct NacmCommandRule {
    pub name: String,
    pub context: Option<String>,
    pub command: Option<String>,
    pub access_operations: HashSet<Operation>,
    pub effect: RuleEffect,
    pub order: u32,
    pub log_if_permit: bool,
    pub log_if_deny: bool,
    pub comment: Option<String>,
}

NACM Command Rule structure (Tail-f ACM extension)

Represents a command-based access control rule for CLI and Web UI operations. Command rules complement standard NACM data access rules by controlling access to management commands that don’t map to NETCONF operations.

Fields

• name - Human-readable identifier for the command rule
• context - Management interface pattern (e.g., “cli”, “webui”, “*”)
• command - Command pattern to match (supports wildcards)
• access_operations - Set of command operations (read, exec)
• effect - Whether to permit or deny matching command requests
• order - Rule precedence within the rule list
• log_if_permit - Log when this rule permits access
• log_if_deny - Log when this rule denies access
• comment - Optional description of the rule

Examples

use nacm_validator::{NacmCommandRule, RuleEffect, Operation};
use std::collections::HashSet;
 
let mut ops = HashSet::new();
ops.insert(Operation::Read);
ops.insert(Operation::Exec);
 
let cmd_rule = NacmCommandRule {
    name: "cli-show-status".to_string(),
    context: Some("cli".to_string()),
    command: Some("show status".to_string()),
    access_operations: ops,
    effect: RuleEffect::Permit,
    order: 10,
    log_if_permit: true,
    log_if_deny: false,
    comment: Some("Allow operators to view system status".to_string()),
};

Fields

name: String

Unique name for this command rule

context: Option<String>

Management interface pattern (e.g., “cli”, “webui”, “*”)

command: Option<String>

Command pattern to match (supports wildcards)

access_operations: HashSet<Operation>

Set of command operations covered by this rule

effect: RuleEffect

Whether this rule permits or denies access

order: u32

Rule precedence within the rule list

log_if_permit: bool

Log when this rule permits access

log_if_deny: bool

Log when this rule denies access

comment: Option<String>

Optional description of the rule

Trait Implementations

impl Clone for NacmCommandRule

fn clone(&self) -> NacmCommandRule

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NacmCommandRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.