Enum AccessDenied 

pub enum AccessDenied {
    CapabilityDenied {
        operation: String,
        required: Capability,
        available: Capability,
    },
    ResourceDenied(SandboxError),
    SessionDenied(String),
}

Unified error for access denied across all permission layers.

Callers can match on the variant to determine which layer denied access and provide appropriate user feedback.

Example

use orcs_auth::{AccessDenied, Capability};

let err = AccessDenied::CapabilityDenied {
    operation: "write".to_string(),
    required: Capability::WRITE,
    available: Capability::READ,
};

assert!(err.to_string().contains("write"));

Variants

CapabilityDenied

Operation requires a capability the entity does not have.

Fields

operation: String

The operation that was attempted.

required: Capability

The capability required for the operation.

available: Capability

The capabilities actually available to the entity.

ResourceDenied(SandboxError)

Resource access denied by sandbox policy.

SessionDenied(String)

Session does not have sufficient privilege for the operation.

Implementations

impl AccessDenied

pub fn layer(&self) -> &'static str

Returns the permission layer that denied access.

Trait Implementations

impl Debug for AccessDenied

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for AccessDenied

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Error for AccessDenied

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0: use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0: replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<SandboxError> for AccessDenied

fn from(source: SandboxError) -> AccessDenied

Converts to this type from the input type.