Struct PolicyEngine 

pub struct PolicyEngine { /* private fields */ }

Implementations

impl PolicyEngine

pub fn load_graph(path: &Path, graph_id: &str) -> Result<PolicyEngine, Report>

Load a per-graph policy file. Rejects rules whose actions are server-scoped (e.g. graph_list) — those belong in a server policy file, not a per-graph one.

graph_id is the label of the graph this engine governs; becomes the Cedar Omnigraph::Graph::"<graph_id>" resource for every per-graph action evaluated against this engine.

pub fn load_server(path: &Path) -> Result<PolicyEngine, Report>

Load a server-level policy file. Rejects rules whose actions are per-graph (e.g. read, change) — those belong in a per-graph policy file, not the server one. Takes no graph_id: server-scoped actions resolve against the singleton Omnigraph::Server::"root" entity, never a Graph.

pub fn authorize( &self, actor_id: &str, request: &PolicyRequest, ) -> Result<PolicyDecision, Report>

Evaluate a request. actor_id is supplied as a separate argument (not inside PolicyRequest) so the type system enforces the “server-authoritative actor identity” invariant — clients supplying a PolicyRequest cannot smuggle identity through the same struct that carries the requested action.

pub fn run_tests(&self, tests: &PolicyTestConfig) -> Result<(), Report>

pub fn known_actor_count(&self) -> usize

Trait Implementations

impl Clone for PolicyEngine

fn clone(&self) -> PolicyEngine

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl PolicyChecker for PolicyEngine

fn check( &self, action: PolicyAction, scope: &ResourceScope, actor: &str, ) -> Result<(), PolicyError>

Engine-layer gate. Called at the head of every mutating engine method. Ok(()) allows the action; Err(PolicyError::Denied) denies; Err(PolicyError::Internal) reports an evaluation bug.