Enum OpEntity 

pub enum OpEntity {
    Public,
    RequiresAuthentication,
    Role(String),
    User(String),
}

An entity key inside an operation’s permission object.

pointerFields is not here: it is a sibling key whose value is an array of field names rather than an entity granted true, and conflating the two is how a permission object stops being a map from principal to grant.

Variants

Public

"*"

RequiresAuthentication

"requiresAuthentication". Not a principal: a predicate over the caller.

Role(String)

"role:<name>", stored without the prefix.

User(String)

An objectId.

Implementations

impl OpEntity

pub fn parse(key: &str) -> Self

Total, so a role:-prefixed string can never end up in the User arm.

That totality is the mitigation for the role: objectId collision: upstream has to guard it at two call sites with an explicit startsWith check (Auth.js:195, :237) precisely because its entity namespace is one flat untyped string space.

pub fn as_key(&self) -> String

Trait Implementations

impl Clone for OpEntity

fn clone(&self) -> OpEntity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OpEntity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for OpEntity

impl Hash for OpEntity

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for OpEntity

fn eq(&self, other: &OpEntity) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for OpEntity