Struct ockam_abac::attribute_access_control::AbacAccessControl

pub struct AbacAccessControl { /* private fields */ }

This AccessControl uses a storage for authenticated attributes in order to verify if a policy expression is valid A similar access control policy is available as crate::policy::PolicyAccessControl where as crate::PoliciesRepository can be used to retrieve a specific policy for a given resource and action

Implementations

impl AbacAccessControl

pub fn new( identity_attributes_repository: Arc<dyn IdentityAttributesRepository>, policy: Policy, environment: Env ) -> Self

Create a new AccessControl using a specific policy for checking attributes

pub fn create( identity_attributes_repository: Arc<dyn IdentityAttributesRepository>, attribute_name: &str, attribute_value: &str ) -> AbacAccessControl

Create an AccessControl which will verify that the sender of a message has an authenticated attribute with the correct name and value

impl AbacAccessControl

pub async fn is_identity_authorized(&self, id: Identifier) -> Result<bool>

Returns true if the identity is authorized

Trait Implementations

impl Debug for AbacAccessControl

Debug implementation printing out the policy expression only

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl IncomingAccessControl for AbacAccessControl

fn is_authorized<'life0, 'life1, 'async_trait>( &'life0 self, msg: &'life1 RelayMessage ) -> Pin<Box<dyn Future<Output = Result<bool>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Returns true if the sender of the message is validated by the expression stored in AbacAccessControl