Struct ockam_abac::PolicyAccessControl

pub struct PolicyAccessControl { /* private fields */ }

Evaluates a policy expression against an environment of attributes.

Attributes come from a pre-populated environment and are augmented by subject attributes from credential data.

Implementations

impl PolicyAccessControl

pub fn new( policies: Arc<dyn PoliciesRepository>, identity_attributes_repository: Arc<dyn IdentityAttributesRepository>, r: Resource, a: Action, env: Env ) -> Self

Create a new PolicyAccessControl.

The policy expression is evaluated by getting subject attributes from the given authenticated storage, adding them the given environment, which may already contain other resource, action or subject attributes.

Trait Implementations

impl Debug for PolicyAccessControl

Debug implementation writing out the resource, action and initial environment

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl IncomingAccessControl for PolicyAccessControl

fn is_authorized<'life0, 'life1, 'async_trait>( &'life0 self, msg: &'life1 RelayMessage ) -> Pin<Box<dyn Future<Output = Result<bool>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Return true if the message is allowed to pass, and false if not.