Struct RbacManager 

pub struct RbacManager { /* private fields */ }

RBAC Manager — manages roles, permissions, and HitL approvals.

Implementations

impl RbacManager

pub fn new() -> Self

Creates a new RBAC manager with default policies for all roles.

pub fn assign_role(&mut self, subject: Subject, role: Role)

Assigns a role to a subject.

pub fn revoke_role(&mut self, subject: &Subject)

Revokes the role from a subject.

pub fn get_role(&self, subject: &Subject) -> Option<Role>

Returns the role assigned to a subject, if any.

pub fn check_permission( &mut self, subject: &Subject, action: &Action, resource: &str, ) -> bool

Checks whether a subject has permission for the given action on a resource.

pub fn request_approval( &mut self, subject: Subject, action: Action, resource: String, reason: String, ) -> Uuid

Creates a new approval request for a high-risk action.

pub fn approve(&mut self, id: Uuid) -> bool

Approves a pending approval request.

pub fn reject(&mut self, id: Uuid) -> bool

Rejects a pending approval request.

pub fn pending_approvals(&self) -> Vec<&PendingApproval>

Returns all currently pending approval requests.

pub fn all_approvals(&self) -> &[(PendingApproval, ApprovalStatus)]

Returns all approval requests (pending + history) with their status.

pub fn audit_log(&self) -> &[RbacAuditEntry]

Returns the RBAC audit log.

Trait Implementations

impl Clone for RbacManager

fn clone(&self) -> RbacManager

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RbacManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RbacManager

fn default() -> Self

Returns the “default value” for a type.