Struct DataAccessPolicy 

pub struct DataAccessPolicy {
    pub allowed_labels: Vec<String>,
    pub denied_rel_types: Vec<String>,
    pub visible_properties: BTreeMap<String, Vec<String>>,
    pub max_results: u64,
}

Tenant-scoped data-access restrictions applied to query results.

Fields

allowed_labels: Vec<String>

Label allow-list, compared as label names are (case-insensitive, see crate::value::normalize_name). ["*"] (ALL_LABELS) allows every label, including labels created later; an empty list allows none, so an enforced policy without labels locks the tenant’s data (reads and writes).

denied_rel_types: Vec<String>

Relationship types that readers must not traverse.

visible_properties: BTreeMap<String, Vec<String>>

Per label, the only properties a reader sees (an allow-list); a label without an entry shows all of its properties.

max_results: u64

Maximum number of rows a query may return.

Implementations

impl DataAccessPolicy

pub fn allows_every_label(&self) -> bool

Whether the allow-list holds ALL_LABELS.

pub fn allows_label(&self, label: &str) -> bool

Whether label is allowed: ALL_LABELS is listed, or a name equal to label once normalized (crate::value::normalize_name). Every read and write check of the allow-list goes through here.

Trait Implementations

impl Clone for DataAccessPolicy

fn clone(&self) -> DataAccessPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DataAccessPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for DataAccessPolicy

fn default() -> DataAccessPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DataAccessPolicy

fn deserialize<__D>( __deserializer: __D, ) -> Result<DataAccessPolicy, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for DataAccessPolicy

impl PartialEq for DataAccessPolicy

fn eq(&self, other: &DataAccessPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for DataAccessPolicy

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for DataAccessPolicy