Struct RlsContext 

pub struct RlsContext {
    pub tenant_id: String,
    pub operator_id: String,
    pub agent_id: String,
    /* private fields */
}

RLS context carrying tenant identity for data isolation.

Fields

tenant_id: String

The unified tenant ID — the primary identity for data isolation. Empty string means no tenant scope.

operator_id: String

Legacy: The operator (vendor) this context is scoped to. Set to the same value as tenant_id during the transition period.

agent_id: String

Legacy: The agent (reseller) this context is scoped to. Set to the same value as tenant_id during the transition period.

Implementations

impl RlsContext

pub fn tenant(tenant_id: &str) -> RlsContext

Create a context scoped to a specific tenant (the unified identity).

pub fn operator(operator_id: &str) -> RlsContext

Create a context scoped to a specific operator. Legacy — use tenant() for new code.

pub fn agent(agent_id: &str) -> RlsContext

Create a context scoped to a specific agent (reseller). Legacy — use tenant() for new code.

pub fn operator_and_agent(operator_id: &str, agent_id: &str) -> RlsContext

Create a context scoped to both operator and agent. Legacy — use tenant() for new code.

pub fn super_admin(_token: SuperAdminToken) -> RlsContext

Create a super admin context that bypasses tenant isolation.

Requires a SuperAdminToken — which can only be created via named constructors (for_system_process, for_webhook, for_auth).

Uses nil UUID for all IDs to avoid ''::uuid cast errors in PostgreSQL RLS policies (PostgreSQL doesn’t short-circuit OR).

pub fn empty() -> RlsContext

Create an empty context (no tenant, no super admin).

Used for system-level operations that must not operate within any tenant scope (startup introspection, migrations, health checks).

pub fn has_tenant(&self) -> bool

Returns true if this context has a tenant scope.

pub fn has_operator(&self) -> bool

Returns true if this context has an operator scope.

pub fn has_agent(&self) -> bool

Returns true if this context has an agent scope.

pub fn bypasses_rls(&self) -> bool

Returns true if this context bypasses tenant isolation.

Trait Implementations

impl Clone for RlsContext

fn clone(&self) -> RlsContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RlsContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for RlsContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl PartialEq for RlsContext

fn eq(&self, other: &RlsContext) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for RlsContext

impl StructuralPartialEq for RlsContext