Struct ClassLevelPermissions 

pub struct ClassLevelPermissions { /* private fields */ }

Class-level permissions.

Constructed from the stored _metadata.class_permissions object or from a POST/PUT /schemas body. Both paths keep Self::raw verbatim so that writing the block back cannot drop a key parse-rust does not model.

No PartialEq, because Self::raw holds ParseValues and a derived comparison would inherit that type’s float hazards. Compare the rendered JSON if two blocks need comparing.

Implementations

impl ClassLevelPermissions

pub fn from_map(raw: ParseMap) -> Self

Parse a CLP block. Unknown keys are preserved in Self::raw and otherwise ignored; rejecting them is the schema API’s job, not the model’s, because a block already in the database has to be readable even if it would fail validation today.

pub fn raw(&self) -> &ParseMap

The block exactly as it will be stored. Never derived from the parsed view.

pub fn op(&self, operation: Operation) -> Option<&OpPerm>

The permission object for one operation.

None means unrestricted, not denied. Every caller has to spell that out; the reason it cannot be unwrap_or_default() is the whole point of this module.

pub fn protected_fields(&self) -> &IndexMap<PfEntity, Vec<String>>

pub fn user_fields(&self, operation: Operation) -> &[String]

The class-wide pointer-field array for one operation, per SchemaController.js:1425-1429.

pub fn read_user_fields(&self) -> &[String]

pub fn write_user_fields(&self) -> &[String]

pub fn default_acl(&self) -> Option<&ParseValue>

The class’s declared default ACL, if it has one that upstream would stamp on a create.

None covers three cases that upstream’s condition collapses (RestWrite.js:379-384): the ACL key is absent; its value is falsy, which is schema?.classLevelPermissions?.ACL failing its own truthiness test; or it is exactly the public ACL, which upstream skips because stamping {"*": {"read": true, "write": true}} on a row would only reproduce what an absent ACL already means.

That last comparison is JSON.stringify equality upstream, so it is key-order sensitive, and [is_the_public_acl] reproduces the ordering rather than comparing structurally. A block whose keys arrived in the other order is not the public ACL as far as upstream is concerned, and it gets stamped.

A truthy non-object is returned rather than filtered: upstream clones and assigns whatever it finds, and the resulting ACL value is then lowered by the same rule any client-supplied one is.

pub fn applicable_pointer_fields(&self, operation: Operation) -> Vec<String>

Every pointer field that applies to an operation, per-op first then class-wide, deduped.

Order is upstream’s (DatabaseController.js:1749-1764) and matters, because the clauses are composed into an $or whose element order is observable in a compiled query.

Trait Implementations

impl Clone for ClassLevelPermissions

fn clone(&self) -> ClassLevelPermissions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClassLevelPermissions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.