pub struct AccessGate { /* private fields */ }Expand description
Single entry point for all authorization decisions.
Wraps RBAC, per-agent permissions, capability checks, and exec policy.
Implementations§
Source§impl AccessGate
impl AccessGate
Sourcepub fn new(
permissions: Arc<Mutex<HashMap<String, AgentPermissions>>>,
rbac: Arc<Mutex<RbacManager>>,
exec_policy: Arc<ExecPolicy>,
audit: Arc<dyn AuditSink>,
) -> Self
pub fn new( permissions: Arc<Mutex<HashMap<String, AgentPermissions>>>, rbac: Arc<Mutex<RbacManager>>, exec_policy: Arc<ExecPolicy>, audit: Arc<dyn AuditSink>, ) -> Self
Create a new gate.
Sourcepub fn permissive() -> Self
pub fn permissive() -> Self
Create a permissive gate (all checks pass). Useful for development.
Sourcepub fn register_agent(&self, agent_name: &str, role: Role)
pub fn register_agent(&self, agent_name: &str, role: Role)
Grant default permissions for an agent.
Sourcepub fn check(&self, req: CheckRequest<'_>) -> Result<(), AccessDenied>
pub fn check(&self, req: CheckRequest<'_>) -> Result<(), AccessDenied>
Perform authorization check.
Trait Implementations§
Auto Trait Implementations§
impl !RefUnwindSafe for AccessGate
impl !UnwindSafe for AccessGate
impl Freeze for AccessGate
impl Send for AccessGate
impl Sync for AccessGate
impl Unpin for AccessGate
impl UnsafeUnpin for AccessGate
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more