Struct PolicyEvaluator 

pub struct PolicyEvaluator<'a> { /* private fields */ }

Engine-side implementation of the policy evaluator trait.

Holds references to Services (for functions/clock) and SymbolTable (for variable resolution), and compiles+evaluates RQL expressions.

Implementations

impl<'a> PolicyEvaluator<'a>

pub fn new(services: &'a Arc<Services>, symbol_table: &'a SymbolTable) -> Self

pub fn enforce_write_policies( &self, tx: &mut Transaction<'_>, identity: IdentityId, target_namespace: &str, target_object: &str, operation: &str, row_columns: &Columns, target_type: PolicyTargetType, ) -> Result<()>

pub fn enforce_session_policy( &self, tx: &mut Transaction<'_>, identity: IdentityId, session_type: &str, default_deny: bool, ) -> Result<()>

pub fn enforce_identity_policy( &self, tx: &mut Transaction<'_>, identity: IdentityId, target_namespace: &str, target_object: &str, operation: &str, target_type: PolicyTargetType, ) -> Result<()>

Trait Implementations

impl PolicyEvaluator for PolicyEvaluator<'_>

fn evaluate_condition( &self, expr: &Expression, columns: &Columns, row_count: usize, identity: IdentityId, ) -> Result<bool>

Evaluate a condition expression against the given columns and identity.