pub struct AccessGate { /* private fields */ }Expand description
Single entry point for all authorization decisions.
Wraps RBAC, per-agent permissions, capability checks, and exec policy.
Implementations§
Source§impl AccessGate
impl AccessGate
Sourcepub fn new(
permissions: Arc<Mutex<HashMap<String, AgentPermissions>>>,
rbac: Arc<Mutex<RbacManager>>,
exec_policy: Arc<ExecPolicy>,
audit: Arc<dyn AuditSink>,
) -> Self
pub fn new( permissions: Arc<Mutex<HashMap<String, AgentPermissions>>>, rbac: Arc<Mutex<RbacManager>>, exec_policy: Arc<ExecPolicy>, audit: Arc<dyn AuditSink>, ) -> Self
Create a new gate.
Sourcepub fn permissive() -> Self
pub fn permissive() -> Self
Create a permissive gate (all checks pass). Useful for development.
Sourcepub fn register_agent(&self, agent_name: &str, role: Role)
pub fn register_agent(&self, agent_name: &str, role: Role)
Grant default permissions for an agent.
Sourcepub fn check(&self, req: CheckRequest<'_>) -> Result<(), AccessDenied>
pub fn check(&self, req: CheckRequest<'_>) -> Result<(), AccessDenied>
Perform authorization check.
Trait Implementations§
Auto Trait Implementations§
impl !RefUnwindSafe for AccessGate
impl !UnwindSafe for AccessGate
impl Freeze for AccessGate
impl Send for AccessGate
impl Sync for AccessGate
impl Unpin for AccessGate
impl UnsafeUnpin for AccessGate
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
Source§impl<T> Downcast for Twhere
T: Any,
impl<T> Downcast for Twhere
T: Any,
Source§fn into_any(self: Box<T>) -> Box<dyn Any>
fn into_any(self: Box<T>) -> Box<dyn Any>
Convert
Box<dyn Trait> (where Trait: Downcast) to Box<dyn Any>. Box<dyn Any> can
then be further downcast into Box<ConcreteType> where ConcreteType implements Trait.Source§fn into_any_rc(self: Rc<T>) -> Rc<dyn Any>
fn into_any_rc(self: Rc<T>) -> Rc<dyn Any>
Convert
Rc<Trait> (where Trait: Downcast) to Rc<Any>. Rc<Any> can then be
further downcast into Rc<ConcreteType> where ConcreteType implements Trait.Source§fn as_any(&self) -> &(dyn Any + 'static)
fn as_any(&self) -> &(dyn Any + 'static)
Convert
&Trait (where Trait: Downcast) to &Any. This is needed since Rust cannot
generate &Any’s vtable from &Trait’s.Source§fn as_any_mut(&mut self) -> &mut (dyn Any + 'static)
fn as_any_mut(&mut self) -> &mut (dyn Any + 'static)
Convert
&mut Trait (where Trait: Downcast) to &Any. This is needed since Rust cannot
generate &mut Any’s vtable from &mut Trait’s.