Struct Grant 

pub struct Grant {
    pub principal: GrantPrincipal,
    pub resource: Resource,
    pub actions: BTreeSet<Action>,
    pub with_grant_option: bool,
    pub granted_by: String,
    pub granted_at: u128,
    pub tenant: Option<String>,
    pub columns: Option<Vec<String>>,
}

A single GRANT row.

Fields

principal: GrantPrincipal

resource: Resource

actions: BTreeSet<Action>

with_grant_option: bool

WITH GRANT OPTION — recipient may re-grant.

granted_by: String

Username of the grantor.

granted_at: u128

Timestamp (ms since epoch) for audit.

tenant: Option<String>

Tenant the grant lives in. None = global/platform tenant.

columns: Option<Vec<String>>

Optional column list for column-level privileges. None means the grant covers all columns. Storage-only (the AST/parser populates it; enforcement is deferred — see the module docstring).

Implementations

impl Grant

pub fn single( principal: GrantPrincipal, resource: Resource, action: Action, granted_by: String, granted_at: u128, tenant: Option<String>, ) -> Grant

Convenience constructor — most callers want a single-action grant.

pub fn authorises( &self, action: Action, resource: &Resource, tenant: Option<&str>, ) -> bool

True iff this grant authorises action on resource for the given tenant.

Trait Implementations

impl Clone for Grant

fn clone(&self) -> Grant

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Grant

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.