Enum DenyReason 

pub enum DenyReason {
    NotStructurallyEligible {
        is_system_owned: bool,
        is_platform_scoped: bool,
    },
    PolicyDenied,
}

Why a managed config write was denied. Designed for Control Event payloads: the variant tells operators what kind of guard tripped, and the structured fields let them see which eligibility flag was false.

Variants

NotStructurallyEligible

Caller is not the operator-principal shape required by managed guardrails (must be both system-owned and platform-scoped).

Fields

is_system_owned: bool

is_platform_scoped: bool

PolicyDenied

Caller is structurally eligible but the policy evaluator rejected the action/resource pair (either explicit Deny or DefaultDeny).

Trait Implementations

impl Clone for DenyReason

fn clone(&self) -> DenyReason

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DenyReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for DenyReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for DenyReason

fn eq(&self, other: &DenyReason) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for DenyReason

impl StructuralPartialEq for DenyReason