Struct RoleSystem

pub struct RoleSystem<S = MemoryStorage>
where
    S: Storage,
{ /* private fields */ }

The main role-based access control system.

Implementations

impl RoleSystem<MemoryStorage>

pub fn new() -> Self

Create a new role system with default configuration and memory storage.

pub fn with_config(config: RoleSystemConfig) -> Self

Create a new role system with custom configuration and memory storage.

impl<S> RoleSystem<S>

where S: Storage,

pub fn with_storage(storage: S, config: RoleSystemConfig) -> Self

Create a new role system with custom storage.

pub fn register_role(&mut self, role: Role) -> Result<()>

Register a new role in the system.

pub fn get_role(&self, name: &str) -> Result<Option<Role>>

Get a role by name.

pub fn update_role(&mut self, role: Role) -> Result<()>

Update an existing role.

pub fn add_role_inheritance(&mut self, child: &str, parent: &str) -> Result<()>

Add role inheritance (child inherits from parent).

pub fn remove_role_inheritance( &mut self, child: &str, parent: &str, ) -> Result<()>

Remove role inheritance.

pub fn assign_role(&mut self, subject: &Subject, role_name: &str) -> Result<()>

Assign a role to a subject.

pub fn remove_role(&mut self, subject: &Subject, role_name: &str) -> Result<()>

Remove a role from a subject.

pub fn elevate_role( &mut self, subject: &Subject, role_name: &str, duration: Option<Duration>, ) -> Result<()>

Temporarily elevate a subject’s role.

pub fn check_permission( &self, subject: &Subject, action: &str, resource: &Resource, ) -> Result<bool>

Check if a subject has a specific permission on a resource.

pub fn check_permission_with_context( &self, subject: &Subject, action: &str, resource: &Resource, context: &HashMap<String, String>, ) -> Result<bool>

Check permission with additional context.

pub fn get_subject_roles(&self, subject: &Subject) -> Result<HashSet<String>>

Get all roles assigned to a subject (including inherited roles).

Trait Implementations

impl<S> Default for RoleSystem<S>

where S: Storage + Default,

fn default() -> Self

Returns the “default value” for a type.