Struct PolicyEvaluator 

pub struct PolicyEvaluator { /* private fields */ }

RBAC policy evaluator.

Implementations

impl PolicyEvaluator

pub fn new(policy: RbacPolicy) -> Self

Create a new policy evaluator.

pub fn with_cache_ttl(self, ttl: Duration) -> Self

Set cache TTL.

pub fn clear_cache(&self)

Clear the evaluation cache.

pub fn is_allowed(&self, subject: &Subject, permission: Permission) -> bool

Check if subject has a permission.

pub fn can_access( &self, subject: &Subject, resource: &str, permission: Permission, ) -> RbacResult<()>

Check if subject can access a resource.

pub fn can_access_kernel( &self, subject: &Subject, kernel_id: &KernelId, permission: Permission, ) -> RbacResult<()>

Check kernel access.

pub fn get_permissions(&self, subject: &Subject) -> HashSet<Permission>

Get all permissions for a subject.