Struct PermissionSet 

pub struct PermissionSet { /* private fields */ }

A bitmask-based set of granted permissions, optionally combined with fine-grained filesystem path restrictions.

Operations return Self by value for builder-pattern chaining.

Implementations

impl PermissionSet

pub fn new() -> Self

Create a set with no permissions granted.

pub fn with_all() -> Self

Create a set with all known permissions granted (no path restrictions).

pub fn grant(self, flag: u32) -> Self

Grant the given permission flag(s), returning the updated set.

pub fn revoke(self, flag: u32) -> Self

Revoke the given permission flag(s), returning the updated set.

pub fn has(&self, flag: u32) -> bool

Test whether the given permission flag(s) are all granted.

pub fn bits(&self) -> u32

Return the raw bitmask.

pub fn allow_path(self, path: impl Into<PathBuf>) -> Self

Add a path to the filesystem allow-list.

When the allow-list is non-empty, only paths that are equal to or are descendants of an allowed path may be accessed (requires PERM_FILESYSTEM to be set as well).

The path is stored as-is (no canonicalisation is performed here; canonicalise before calling if required).

pub fn deny_path(self, path: &Path) -> Self

Remove a path from the filesystem allow-list.

pub fn allowed_paths(&self) -> &[PathBuf]

Return the filesystem path allow-list.

pub fn is_path_allowed(&self, path: &Path) -> bool

Check whether path is permitted by the current allow-list rules.

Returns true if:

• PERM_FILESYSTEM is not set → always false (filesystem denied), or
• PERM_FILESYSTEM is set AND the allow-list is empty → always true, or
• PERM_FILESYSTEM is set AND path starts with any allowed path entry.

Trait Implementations

impl Clone for PermissionSet

fn clone(&self) -> PermissionSet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionSet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionSet

fn default() -> Self

Returns the “default value” for a type.

impl PartialEq for PermissionSet

fn eq(&self, other: &PermissionSet) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for PermissionSet

impl StructuralPartialEq for PermissionSet