Enum AuditDenyReason 

pub enum AuditDenyReason {
    Unauthenticated,
    InvalidSession,
    MissingScope,
    NotAccepted,
    TenantBoundary,
    RateLimited,
    Other,
}

The per-layer reason a deny occurred.

Captures AUTHZ-0’s layered-denial model (per AUTHZ-S01-output §1): the audit record names which layer rejected the call so operators can reconstruct the chain after the fact. The wire response does NOT carry this discriminator (AUTHZ-PRIVACY-4); it is server-side only.

Variants

Unauthenticated

No credential / anonymous caller hit a non-public method.

InvalidSession

Credential present but invalid (expired token, unknown sid, etc.).

MissingScope

Authenticated, but the method’s scope is not in the caller’s set.

NotAccepted

Method exists but the perimeter rejected the call (#[plexus::method(deny)] or similar policy rejection).

TenantBoundary

Tenant resolved, but does not match the data the call references.

RateLimited

Rate-limit policy fired.

Other

Catch-all for layered impls that have not yet earned a dedicated variant. Use sparingly; the wire still goes out generic, but the audit log loses fidelity.

Trait Implementations

impl Clone for AuditDenyReason

fn clone(&self) -> AuditDenyReason

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditDenyReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditDenyReason

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Hash for AuditDenyReason

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for AuditDenyReason

fn eq(&self, other: &AuditDenyReason) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuditDenyReason

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for AuditDenyReason

impl Eq for AuditDenyReason

impl StructuralPartialEq for AuditDenyReason