Enum AclScope 

pub enum AclScope {
    Unrestricted,
    Anonymous,
    User {
        object_id: String,
    },
}

Who a request is acting as, for ACL purposes.

An enum rather than an Option<String> so that “no ACL constraint at all” cannot be reached by forgetting to set a field. acl === undefined as a master sentinel is the upstream shape this deliberately does not copy.

Variants

Unrestricted

Master or maintenance: no ACL constraint is applied at all.

Anonymous

A caller acting as nobody in particular.

User

A logged-in user. Roles are out of scope for 0.1.0, so a role: entry never matches.

Fields

object_id: String

Implementations

impl AclScope

pub fn read_constraint(&self) -> Option<Constraint>

The constraint to add to a read.

None for AclScope::Unrestricted, which is the only case where no constraint is applied. Returning Option makes the master case explicit at every call site instead of being the absence of a step.

pub fn write_constraint(&self) -> Option<Constraint>

The constraint to add to a write.

Note the asymmetry with reads: addWriteACL omits '*' from the injected list, because getUserAndRoleACL already seeds it for every non-master caller. Reproduced rather than unified, since the two functions are not symmetric upstream and a caller path that builds its own list would behave differently.

Trait Implementations

impl Clone for AclScope

fn clone(&self) -> AclScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AclScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AclScope

impl PartialEq for AclScope

fn eq(&self, other: &AclScope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AclScope