Enum PolicyEnforcementMode 

pub enum PolicyEnforcementMode {
    LegacyRbac,
    PolicyOnly,
}

Selects the behaviour of the policy evaluator when no statement matches the requested (action, resource) pair. See the module docs for the semantics of each variant.

Variants

LegacyRbac

Fall back to the role-based decision when no policy matches.

PolicyOnly

Treat “no matching policy” as DefaultDeny.

Implementations

impl PolicyEnforcementMode

pub fn as_str(self) -> &'static str

pub fn parse(value: &str) -> Option<Self>

Parse a configuration value. Returns None for any string that is not exactly one of the two accepted modes — callers turn that None into the “invalid value” rejection at config-write time.

pub const fn default_fresh_bootstrap() -> Self

Default for a fresh bootstrap (no prior config, no prior users). Fresh installs start in the strict posture so they never carry the legacy RBAC fallback as accumulated technical debt.

pub const fn default_existing_install() -> Self

Default for an existing install that has no enforcement_mode key set. Preserves pre-#712 behaviour so the upgrade is non-disruptive; operators move to policy_only explicitly via the migration command (S5B).

Trait Implementations

impl Clone for PolicyEnforcementMode

fn clone(&self) -> PolicyEnforcementMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicyEnforcementMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for PolicyEnforcementMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for PolicyEnforcementMode

fn eq(&self, other: &PolicyEnforcementMode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for PolicyEnforcementMode

impl Eq for PolicyEnforcementMode

impl StructuralPartialEq for PolicyEnforcementMode