Struct ObjectPermissionManager 

pub struct ObjectPermissionManager { /* private fields */ }

Available on crate feature auth and non-WebAssembly only.

Object permission manager

Manages object-level permissions using a permission map.

Examples

use reinhardt_auth::object_permissions::{ObjectPermissionManager, ObjectPermissionChecker};
use reinhardt_auth::{SimpleUser, User};
use uuid::Uuid;

#[tokio::main]
async fn main() {
    let mut manager = ObjectPermissionManager::new();

    // Grant alice permission to change article:123
    manager.grant_permission("alice", "article:123", "change").await;

    let user = SimpleUser {
        id: Uuid::new_v4(),
        username: "alice".to_string(),
        email: "alice@example.com".to_string(),
        is_active: true,
        is_admin: false,
        is_staff: false,
        is_superuser: false,
    };

    assert!(manager.has_object_permission(&user, "article:123", "change").await);
    assert!(!manager.has_object_permission(&user, "article:123", "delete").await);

    // Revoke permission
    manager.revoke_permission("alice", "article:123", "change").await;
    assert!(!manager.has_object_permission(&user, "article:123", "change").await);
}

Implementations

impl ObjectPermissionManager

pub fn new() -> ObjectPermissionManager

Create a new object permission manager

Examples

use reinhardt_auth::object_permissions::ObjectPermissionManager;

let manager = ObjectPermissionManager::new();

pub async fn grant_permission( &mut self, username: &str, object_id: &str, permission: &str, )

Grant permission to user for specific object

Examples

use reinhardt_auth::object_permissions::ObjectPermissionManager;

#[tokio::main]
async fn main() {
    let mut manager = ObjectPermissionManager::new();
    manager.grant_permission("alice", "article:123", "change").await;
    manager.grant_permission("alice", "article:123", "view").await;
}

pub async fn revoke_permission( &mut self, username: &str, object_id: &str, permission: &str, )

Revoke permission from user for specific object

Examples

use reinhardt_auth::object_permissions::ObjectPermissionManager;

#[tokio::main]
async fn main() {
    let mut manager = ObjectPermissionManager::new();
    manager.grant_permission("alice", "article:123", "change").await;
    manager.revoke_permission("alice", "article:123", "change").await;
}

pub async fn revoke_all_permissions(&mut self, username: &str, object_id: &str)

Revoke all permissions for user on specific object

Examples

use reinhardt_auth::object_permissions::ObjectPermissionManager;

#[tokio::main]
async fn main() {
    let mut manager = ObjectPermissionManager::new();
    manager.grant_permission("alice", "article:123", "change").await;
    manager.grant_permission("alice", "article:123", "view").await;
    manager.revoke_all_permissions("alice", "article:123").await;
}

pub async fn list_permissions( &self, username: &str, object_id: &str, ) -> Vec<String>

List all permissions for user on specific object

Examples

use reinhardt_auth::object_permissions::ObjectPermissionManager;

#[tokio::main]
async fn main() {
    let mut manager = ObjectPermissionManager::new();
    manager.grant_permission("alice", "article:123", "change").await;
    manager.grant_permission("alice", "article:123", "view").await;

    let perms = manager.list_permissions("alice", "article:123").await;
    assert_eq!(perms.len(), 2);
}

Trait Implementations

impl Default for ObjectPermissionManager

fn default() -> ObjectPermissionManager

Returns the “default value” for a type.

impl ObjectPermissionChecker for ObjectPermissionManager

fn has_object_permission<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 self, user: &'life1 dyn User, object_id: &'life2 str, permission: &'life3 str, ) -> Pin<Box<dyn Future<Output = bool> + Send + 'async_trait>>

where 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait, ObjectPermissionManager: 'async_trait,

Check if user has permission for specific object