Struct RepoPolicy 

pub struct RepoPolicy {
    pub version: u32,
    pub deny: Vec<RuleGroup>,
    pub allow: Vec<RuleGroup>,
    pub ask: Vec<RuleGroup>,
}

A repository policy. Only rules: defaults, executables and sandbox stay the user’s, so any other key is a parse error.

Fields

version: u32

Schema version; only 1 is supported.

deny: Vec<RuleGroup>

Added to the user’s deny rules.

allow: Vec<RuleGroup>

Added to the user’s allow rules, only when the file is trusted.

ask: Vec<RuleGroup>

Tried before the user’s allow rules.

Implementations

impl RepoPolicy

pub fn parse(yaml: &str) -> Result<Self, PolicyError>

Parse and lint a repository policy. Pure: takes the YAML text.

pub fn merge(&self, user: &Policy, trusted: bool) -> Result<Policy, PolicyError>

user with this policy merged in; its allow rules only when trusted. The user’s deny rules still come first, so even a trusted repository cannot allow what the user denies.

pub fn merge_deny(&self, user: &Policy) -> Result<Policy, PolicyError>

user with only this policy’s deny rules added: what openmoat run’s proxy decides hosts with. Its ask rules are left out, since the proxy cannot ask and a team’s “ask before any network” would cut the run off, and its allow rules too, trusted or not: they would widen the proxy.

Trait Implementations

impl Clone for RepoPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RepoPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RepoPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RepoPolicy

impl PartialEq for RepoPolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for RepoPolicy