Crate rskit_authz 

Canonical RBAC + ABAC authorization engine with deny-override semantics.

Re-exports

pub use checker::Checker;

pub use engine::AttributeSource;

pub use engine::Attributes;

pub use engine::Condition;

pub use engine::Decision;

pub use engine::Effect;

pub use engine::Engine;

pub use engine::Operator;

pub use engine::Permission;

pub use engine::Policy;

pub use engine::Request;

pub use engine::Resource;

pub use engine::Role;

pub use engine::Subject;

pub use matcher::match_any;

pub use matcher::match_pattern;

pub use middleware::AuthorizationLayer;

pub use middleware::AuthorizationService;

pub use middleware::RequestAuthorizer;

Modules

checker

Core authorization checker trait. Lightweight authorization traits.

engine

Canonical authorization engine. Canonical RBAC + ABAC authorization engine: policy model and runtime evaluation.

matcher

Wildcard permission matching. Wildcard permission matching helpers.

middleware

Tower authorization middleware. Tower middleware for request-scoped authorization checks.

Structs

AuthzRequest

Transport-agnostic authorization request for a principal, action, and resource.

Enums

AuthzDecision

Transport-agnostic authorization decision.

Traits

Decider

Object-safe authorization decider used at integration boundaries.