Struct PrivilegeDoctorReport 

pub struct PrivilegeDoctorReport {

    pub privileges_total: usize,
    pub public_grants_total: usize,
    pub synonym_paths_total: usize,
    pub public_synonym_paths: usize,
    pub access_control_entries_total: usize,
    pub cross_schema_writes_total: usize,
    pub cross_schema_writes_ambiguous: usize,
    pub authorization_ambiguities_total: usize,
    pub ambiguity_reasons: Vec<DoctorReasonRow>,
    pub schemas_observed_total: usize,
    pub authid_distribution: AuthidDistribution,
    pub diagnostics_total: usize,
    pub posture: PrivilegePosture,
    pub remediation_hints: Vec<String>,
}

Aggregated diagnostic counts for a single PrivilegeModel. The shape is stable across versions — new fields are added behind #[serde(default)] so older snapshots keep deserializing.

Fields

privileges_total: usize

Total resolved privileges.

public_grants_total: usize

Resolved privileges granted to PUBLIC.

synonym_paths_total: usize

Synonym-mediated privilege paths.

public_synonym_paths: usize

Public-synonym paths (is_public == true).

access_control_entries_total: usize

ACCESSIBLE BY entries observed.

cross_schema_writes_total: usize

Cross-schema writes observed.

cross_schema_writes_ambiguous: usize

Cross-schema writes whose authorization could not be resolved statically (carries runtime_ambiguity = Some(_)).

authorization_ambiguities_total: usize

AuthorizationAmbiguity entries — authorizations that flip on runtime role state.

ambiguity_reasons: Vec<DoctorReasonRow>

Distinct UnknownReason codes seen in the ambiguity list, sorted by reason code for stable output.

schemas_observed_total: usize

Distinct schemas mentioned across the model. Useful to cross-check against plsql_catalog::CatalogDoctorReport — if the catalog has N schemas but the privilege model only mentions M, the gap is surfaced by callers.

authid_distribution: AuthidDistribution

Distinct definer and invoker AuthorizationMode counts seen in evidence. We do not currently track AuthorizationMode on every ResolvedPrivilege — the surface is reserved for the engine layer to populate when the orchestration ships.

diagnostics_total: usize

Diagnostics recorded on the model itself.

posture: PrivilegePosture

Overall posture — Clean / Caution / Unknown. Set by [classify_posture].

remediation_hints: Vec<String>

One-line operator hints derived from the counts above.

Trait Implementations

impl Clone for PrivilegeDoctorReport

fn clone(&self) -> PrivilegeDoctorReport

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PrivilegeDoctorReport

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PrivilegeDoctorReport

fn default() -> PrivilegeDoctorReport

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PrivilegeDoctorReport

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PrivilegeDoctorReport

impl PartialEq for PrivilegeDoctorReport

fn eq(&self, other: &PrivilegeDoctorReport) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PrivilegeDoctorReport

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PrivilegeDoctorReport