Trait PermissionPolicy

Source

pub trait PermissionPolicy: Send + Sync {
    // Required methods
    fn can_signal(&self, session: &Session, scope: &SignalScope) -> bool;
    fn can_destructive(&self, session: &Session, action: &str) -> bool;
    fn can_execute_command(&self, session: &Session, cmd: &str) -> bool;
    fn can_spawn_child(&self, session: &Session) -> bool;
    fn can_spawn_runner(&self, session: &Session) -> bool;

    // Provided method
    fn check_command_permission(
        &self,
        session: &Session,
        cmd: &str,
    ) -> CommandPermission { ... }
}

Expand description

Abstract permission policy for session-based access control.

Implement this trait to define custom permission policies. The trait is runtime-independent — it doesn’t depend on ApprovalRequest or other runtime-specific types.

§Implementors

DefaultPolicy (in orcs-runtime) — standard policy with blocked/elevated patterns
Custom impls for testing or restricted environments

§Example

use orcs_auth::{PermissionPolicy, Session, CommandPermission};
use orcs_types::{SignalScope, Principal, PrincipalId};

struct PermissivePolicy;

impl PermissionPolicy for PermissivePolicy {
    fn can_signal(&self, _session: &Session, _scope: &SignalScope) -> bool {
        true
    }

    fn can_destructive(&self, _session: &Session, _action: &str) -> bool {
        true
    }

    fn can_execute_command(&self, _session: &Session, _cmd: &str) -> bool {
        true
    }

    fn can_spawn_child(&self, _session: &Session) -> bool {
        true
    }

    fn can_spawn_runner(&self, _session: &Session) -> bool {
        true
    }
}

let policy = PermissivePolicy;
let session = Session::new(Principal::User(PrincipalId::new()));
assert!(policy.can_execute_command(&session, "ls -la"));
assert!(policy.check_command_permission(&session, "ls -la").is_allowed());