Struct AccessPolicy 

pub struct AccessPolicy {
    pub tenant_id: String,
    pub user_roles: HashMap<String, Vec<String>>,
    pub roles: HashMap<String, Role>,
    pub ip_whitelist: Vec<String>,
    pub ip_blacklist: Vec<String>,
}

Access policy for a tenant

Fields

tenant_id: String

Tenant ID

user_roles: HashMap<String, Vec<String>>

User/API key to role mapping

roles: HashMap<String, Role>

Available roles

ip_whitelist: Vec<String>

IP whitelist (empty = no restriction)

ip_blacklist: Vec<String>

IP blacklist

Implementations

impl AccessPolicy

pub fn new(tenant_id: impl Into<String>) -> Self

Create new access policy

pub fn add_role(&mut self, role: Role)

Add a role definition

pub fn assign_role( &mut self, user_id: impl Into<String>, role_name: impl Into<String>, )

Assign role to user

pub fn has_permission(&self, user_id: &str, permission: Permission) -> bool

Check if user has permission

pub fn is_ip_allowed(&self, ip: &str) -> bool

Check if IP is allowed

Trait Implementations

impl Clone for AccessPolicy

fn clone(&self) -> AccessPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AccessPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AccessPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.