Struct RbacEngine 

pub struct RbacEngine { /* private fields */ }

RBAC policy engine.

Implementations

impl RbacEngine

pub fn new() -> Self

Create a new RBAC engine.

pub fn add_role(&self, role: Role) -> Result<()>

Add a role.

pub fn get_role(&self, role_id: &str) -> Option<Role>

Get a role by ID.

pub fn remove_role(&self, role_id: &str) -> Result<()>

Remove a role.

pub fn list_roles(&self) -> Vec<Role>

List all roles.

pub fn add_permission(&self, permission: Permission) -> Result<()>

Add a permission.

pub fn get_permission(&self, permission_id: &str) -> Option<Permission>

Get a permission by ID.

pub fn assign_role(&self, subject_id: &str, role_id: &str) -> Result<()>

Assign a role to a subject.

pub fn revoke_role(&self, subject_id: &str, role_id: &str) -> Result<()>

Revoke a role from a subject.

pub fn get_subject_roles(&self, subject_id: &str) -> Vec<String>

Get roles assigned to a subject.

pub fn set_role_inheritance( &self, child_role_id: &str, parent_role_id: &str, ) -> Result<()>

Set role inheritance (child inherits from parent).

pub fn get_effective_roles(&self, subject_id: &str) -> HashSet<String>

Get all roles for a subject including inherited roles.

pub fn has_permission( &self, subject_id: &str, action: Action, resource_type: ResourceType, ) -> bool

Check if a subject has a specific permission.

pub fn get_subject_permissions(&self, subject_id: &str) -> Vec<Permission>

Get all permissions for a subject.

pub fn clear_assignments(&self)

Clear all role assignments.

pub fn clear_roles(&self)

Clear all roles.

pub fn clear_permissions(&self)

Clear all permissions.

Trait Implementations

impl AccessControlEvaluator for RbacEngine

fn evaluate(&self, request: &AccessRequest) -> Result<AccessDecision>

Evaluate an access request.

impl Default for RbacEngine

fn default() -> Self

Returns the “default value” for a type.