Struct DriveGrantedScopes 

pub struct DriveGrantedScopes {
    pub readonly: bool,
    pub metadata: bool,
    pub file: bool,
    pub full: bool,
}

The Drive OAuth2 scope(s) granted at login.

A capability set, not a tier: --write/--write-file/--write-full are independent, combinable opt-ins (Google just grants the union), so a caller can hold any subset of the four scope strings, not one of two mutually exclusive levels (issue #1574, generalizing ADR-0070 §1’s additive-scope principle from two variants to four independent flags). readonly is always requested alongside every other flag — none of metadata/ file/full alone grants read access the way Gmail’s readonly/modify split would imply.

Fields

readonly: bool

drive.readonly — list/read/export/download.

metadata: bool

drive.metadata — files.update on name/parents only (rename/move).

file: bool

drive.file — create/upload, plus edit of app-created files.

full: bool

drive (unrestricted) — edit of any pre-existing file’s content.

Implementations

impl DriveGrantedScopes

pub const READONLY: Self

The scope set requested before issue #1574: readonly only.

pub const METADATA: Self

The scope set requested by --write before issue #1574: readonly + metadata.

pub fn as_str(self) -> String

Returns the canonical, order-stable, space-separated wire string — used both for DRIVE_SCOPE/drive.accounts.<name>.scope storage and directly as [build_authorization_url]’s requested scope= value, since readonly is now just one of four independent bits rather than a request shape [build_authorization_url] has to derive separately.

pub fn summary(self) -> String

Returns the human-readable scope list drive auth status prints — the same set as Self::as_str, in the same order, with the https://www.googleapis.com/auth/ prefix dropped and comma-separated.

Deliberately derived from the flags rather than branched on a predicate. This type used to be a two-state enum, where if allows_write() { … } else { … } was faithful; ADR-0071 §1 replaced it with four independent bits, at which point any such branch necessarily misreports three of the fifteen non-empty combinations and names a scope the account may not hold. Rendering the bits is the only shape that cannot drift as bits are added.

Returns "(none)" for the empty set rather than an empty string, so the status line never reads Granted scope: with nothing after it.

pub fn from_granted(granted: &str) -> Option<Self>

Parses Google’s space-separated granted-scope response. Every recognized token independently sets its own flag (order-independent, unlike a first-match branch).

Returns None when none of the four Drive scope strings are present — e.g. the user left the Drive permission unticked on Google’s consent screen — so callers can reject the grant instead of silently defaulting to an all-false set.

pub fn allows_rename_move(self) -> bool

Whether this scope set allows files.update on name/parents (rename/move).

pub fn allows_create_or_upload(self) -> bool

Whether this scope set allows creating a new file/folder or uploading new content.

pub fn allows_edit_arbitrary_content(self) -> bool

Whether this scope set allows editing a file omni-dev did not itself create — only the unrestricted drive scope can; drive.file alone cannot.

pub fn allows_write(self) -> bool

Whether this scope set allows any mutating call at all.

Trait Implementations

impl Clone for DriveGrantedScopes

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for DriveGrantedScopes

impl Debug for DriveGrantedScopes

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DriveGrantedScopes

fn default() -> Self

Returns the “default value” for a type.

impl Eq for DriveGrantedScopes

impl PartialEq for DriveGrantedScopes

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for DriveGrantedScopes