Skip to main content

authorize_mutation

rushdb_authz

Function authorize_mutation 

Source 
pub fn authorize_mutation(
    scope: &SecurityScope<'_>,
    label: &str,
) -> Result<(), AuthzError>
Expand description

Mutation-side check over the new image (old-image revalidation happens at commit inside the engine’s own preconditions).

§Errors

Returns AuthzError::LabelDenied when the label is not granted in AuthorizationMode::PolicyEnforced mode.