Struct RbacService

pub struct RbacService<S: RbacStorage> { /* private fields */ }

Main RBAC service that coordinates permission checking

Implementations

impl<S: RbacStorage> RbacService<S>

pub fn new(storage: S) -> Self

Create a new RBAC service with the given storage backend

pub async fn create_permission( &self, permission: &Permission, ) -> Result<(), RbacError>

Create a new permission

pub async fn get_permission( &self, name: &str, ) -> Result<Option<Permission>, RbacError>

Get a permission by name

pub async fn delete_permission(&self, name: &str) -> Result<(), RbacError>

Delete a permission

pub async fn create_role(&self, role: &Role) -> Result<(), RbacError>

Create a new role

pub async fn get_role(&self, name: &str) -> Result<Option<Role>, RbacError>

Get a role by name

pub async fn delete_role(&self, name: &str) -> Result<(), RbacError>

Delete a role

pub async fn assign_permission_to_role( &self, permission_name: &str, role_name: &str, ) -> Result<(), RbacError>

Assign a permission to a role

pub async fn remove_permission_from_role( &self, permission_name: &str, role_name: &str, ) -> Result<(), RbacError>

Remove a permission from a role

pub async fn get_permissions_for_role( &self, role_name: &str, ) -> Result<Vec<Permission>, RbacError>

Get all permissions for a role

pub async fn assign_role_to_subject( &self, role_name: &str, subject_id: &str, ) -> Result<(), RbacError>

Assign a role to a subject

pub async fn remove_role_from_subject( &self, role_name: &str, subject_id: &str, ) -> Result<(), RbacError>

Remove a role from a subject

pub async fn get_roles_for_subject( &self, subject_id: &str, ) -> Result<Vec<Role>, RbacError>

Get all roles for a subject

pub async fn assign_permission_to_subject( &self, permission_name: &str, subject_id: &str, ) -> Result<(), RbacError>

Assign a permission directly to a subject

pub async fn remove_permission_from_subject( &self, permission_name: &str, subject_id: &str, ) -> Result<(), RbacError>

Remove a permission from a subject

pub async fn get_direct_permissions_for_subject( &self, subject_id: &str, ) -> Result<Vec<Permission>, RbacError>

Get all direct permissions for a subject (not including those from roles)

pub async fn subject_has_permission( &self, subject_id: &str, permission_name: &str, ) -> Result<bool, RbacError>

Check if a subject has a specific permission (either directly or via roles)