Struct CapabilityGrantV1 

pub struct CapabilityGrantV1 { /* private fields */ }

Complete bounded v1 grant persisted with a capability.

Implementations

impl CapabilityGrantV1

pub fn new( tenant_scope: TenantScope, partition_scope: PartitionScopeV1, permissions: CapabilityPermissionsV1, field_visibility: Vec<EntityFieldVisibilityV1>, max_scan_rows: NonZeroU16, approval_required: Vec<CapabilityPermissionKindV1>, ) -> Result<Self, CapabilityGrantError>

Constructs a canonically ordered complete grant.

pub const fn tenant_scope(&self) -> &TenantScope

Returns the authorization-resolved tenant constraint.

pub const fn partition_scope(&self) -> &PartitionScopeV1

Returns the complete partition constraint.

pub const fn permissions(&self) -> &CapabilityPermissionsV1

Returns the canonical permission set.

pub fn field_visibility(&self) -> &[EntityFieldVisibilityV1]

Returns canonical entity-field visibility entries.

pub const fn max_scan_rows(&self) -> NonZeroU16

Returns the bounded maximum scan rows.

pub fn approval_required(&self) -> &[CapabilityPermissionKindV1]

Returns canonical permission kinds requiring validated approval.

pub fn with_row_policy( self, row_policy: CapabilityRowPolicyGrantV1, ) -> Result<Self, CapabilityGrantError>

Adds the exact V4 row-policy extension after checking the matching role identity.

pub fn with_export( self, export: CapabilityExportGrantV1, ) -> Result<Self, CapabilityGrantError>

Adds the exact V5 export extension after checking scope prerequisites.

pub fn with_reimport( self, reimport: CapabilityApplicationReimportGrantV1, ) -> Result<Self, CapabilityGrantError>

Adds distinct V7 reimport authority after checking its role and scope prerequisites.

pub fn with_vector_inspection( self, inspection: CapabilityVectorInspectionGrantV1, ) -> Result<Self, CapabilityGrantError>

Adds exact V8 vector-inspection authority after checking role, permission, field visibility, and row-policy count-disclosure prerequisites.

pub fn semantic_bytes(&self) -> Result<usize, CapabilityGrantError>

Returns the complete checked v1 semantic grant byte count.

Trait Implementations

impl Clone for CapabilityGrantV1

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityGrantV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CapabilityGrantV1

impl PartialEq for CapabilityGrantV1

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CapabilityGrantV1