Enum RlsWriteCheck 

pub enum RlsWriteCheck {
    Predicate(Vec<u8>),
    NoPolicyApplies,
    AlreadyDecidedElsewhere,
    DecidedEarlierInRequest,
    SystemInternalCollection,
    PendingInjection,
}

The write-policy check attached to one write operation.

Variants

Predicate(Vec<u8>)

Compiled predicate bytes, decoded as Vec<ScanFilter> and evaluated against each row image.

NoPolicyApplies

Injection ran and found no write policy for this identity here.

AlreadyDecidedElsewhere

Follower apply, or WAL replay after a crash.

The authoring identity is absent, so re-deciding could deny a write the leader already committed and diverge the replicas. Admits on purpose.

Only follower-apply and replay code may build this. Never build it where a live writing identity exists.

DecidedEarlierInRequest

This request already ran the policy over this exact row image, with a live identity. That live identity separates it from RlsWriteCheck::AlreadyDecidedElsewhere.

Only build this where the earlier decision provably covered the same image. If the op can touch a row that check did not see, it is not this.

SystemInternalCollection

A collection NodeDB maintains for itself, which no user creates and no policy attaches to — rate-limit bookkeeping, for example.

These never run injection, so they cannot claim NoPolicyApplies.

PendingInjection

Built, but injection has not run yet. Transient, Control Plane only.

If it reaches the gate, the write is DENIED — a missed injection fails loudly instead of quietly disabling the policy.

Implementations

impl RlsWriteCheck

pub fn from_injected(predicate_bytes: Vec<u8>) -> Self

Build the check from the policy compiler’s output.

Empty bytes become RlsWriteCheck::NoPolicyApplies, never an empty predicate, so “no policy” cannot later read as “predicate lost”.

Call this only from the RLS injection pass.

pub fn already_decided_elsewhere() -> Self

Bypass for follower apply or WAL replay.

Never use it to silence a compile error where a live writing identity exists — RlsWriteCheck::pending_injection fails closed there.

pub fn decided_earlier_in_request() -> Self

Bypass for rows this same request already admitted. Only when the earlier check covered the same row image.

pub fn system_internal_collection() -> Self

Bypass for a write to one of NodeDB’s own internal collections.

pub fn pending_injection() -> Self

Placeholder between plan construction and injection.

Safe wherever the right value is not yet known: it fails closed, and the dispatch boundary rejects any write plan still holding it.

pub fn decision(&self) -> WriteGateDecision<'_>

What the Data Plane gate must do with this check.

pub fn has_predicate(&self) -> bool

True only when a compiled predicate is attached — “does a policy restrict this identity here”. Not a gate decision; see RlsWriteCheck::decision.

pub fn is_pending_injection(&self) -> bool

True while the plan has not been through injection. The dispatch boundary uses it to refuse un-injected writes.

Trait Implementations

impl Clone for RlsWriteCheck

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RlsWriteCheck

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RlsWriteCheck

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RlsWriteCheck

impl<'__msgpack_de> FromMessagePack<'__msgpack_de> for RlsWriteCheck

fn read<R: Read<'__msgpack_de>>(reader: &mut R) -> Result<Self, Error>

where Self: Sized,

Reads the MessagePack representation of this value from the provided reader.

impl PartialEq for RlsWriteCheck

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RlsWriteCheck

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RlsWriteCheck

impl ToMessagePack for RlsWriteCheck

fn write<W: Write>(&self, writer: &mut W) -> Result<(), Error>

Writes the MessagePack representation of this value into the provided writer.

fn write_slice<W>(values: &[Self], writer: &mut W) -> Result<(), Error>

where W: Write, Self: Sized,

Writes the MessagePack representation of a slice of values into the provided writer.

fn size_hint(&self) -> Option<TrustedSizeHint>

Returns a trusted upper bound for the number of bytes written by the next call to Self::write, or None when it cannot be determined cheaply.

fn max_size() -> Option<TrustedSizeHint>

where Self: Sized,

Returns a trusted upper bound valid for every value of this type.