pub struct ManifestPolicy {
pub name: String,
pub entity: Option<String>,
pub action: Option<String>,
pub allow: String,
pub allow_read: Option<String>,
pub allow_insert: Option<String>,
pub allow_update: Option<String>,
pub allow_delete: Option<String>,
pub allow_write: Option<String>,
}Expand description
Row-level access policy attached to an entity or action.
allow is the legacy single-gate expression used for every kind of
access. The optional allow_* fields let callers differentiate read
from write from delete. When a per-action field is present it wins;
otherwise the engine falls back to allow. That keeps old manifests
working unchanged while enabling finer-grained ownership rules —
“anyone can read, only the author can edit or delete.”
Fields§
§name: String§entity: Option<String>§action: Option<String>§allow: String§allow_read: Option<String>Overrides allow for reads (pull, list, get). Optional.
allow_insert: Option<String>Overrides allow for inserts. Optional; falls back to allow_write
then allow.
allow_update: Option<String>Overrides allow/allow_write for updates. Optional.
allow_delete: Option<String>Overrides allow/allow_write for deletes. Optional.
allow_write: Option<String>Shared fallback for any write (insert/update/delete) when the more-specific field isn’t set. Optional.
Trait Implementations§
Source§impl Clone for ManifestPolicy
impl Clone for ManifestPolicy
Source§fn clone(&self) -> ManifestPolicy
fn clone(&self) -> ManifestPolicy
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more