Struct Capability 

pub struct Capability {
    pub id: CapabilityId,
    pub resource: ResourceRef,
    pub rights: Rights,
    pub issuer: Issuer,
}

An unforgeable token encoding authority over a specific resource.

A capability binds a set of Rights to a ResourceRef, and records who issued it. Agents present capabilities to the AccessManager to prove they are authorised to perform an action.

Immutability

Capabilities are immutable once created. To change rights, create a new capability and replace the old one in the CSpace.

Fields

id: CapabilityId

Unique identifier for this capability.

resource: ResourceRef

The resource this capability governs.

rights: Rights

The rights granted over the resource.

issuer: Issuer

Who issued this capability.

Implementations

impl Capability

pub fn kernel(resource: ResourceRef, rights: Rights) -> Self

Creates a new kernel-issued capability with the given resource and rights.

pub fn delegated(resource: ResourceRef, rights: Rights, issuer: AgentId) -> Self

Creates a new agent-issued capability (delegation).

pub fn grants(&self, required: Rights) -> bool

Returns true if this capability grants the requested rights.

Trait Implementations

impl Clone for Capability

fn clone(&self) -> Capability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Capability

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Capability

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.