Struct Authorizer 

pub struct Authorizer { /* private fields */ }

A schema and a tuple store: writes checked against the schema, and check.

Implementations

impl Authorizer

pub fn new( schema: Schema, store: impl TupleStore + 'static, ) -> Result<Authorizer, AuthzError>

schema is validated (see Schema::validate).

pub fn with_store( schema: Schema, store: Arc<dyn TupleStore>, ) -> Result<Authorizer, AuthzError>

pub fn schema(&self) -> &Schema

pub fn store(&self) -> &Arc<dyn TupleStore>

pub fn write(&self, tuple: &Tuple) -> Result<bool, AuthzError>

Store tuple if the schema allows it; true if it was new.

pub fn write_str(&self, tuple: &str) -> Result<bool, AuthzError>

write from text (doc:42#editor@user:alice).

pub fn delete(&self, tuple: &Tuple) -> Result<bool, AuthzError>

pub fn check( &self, subject: &str, relation: &str, object: &str, ) -> Result<bool, AuthzError>

Whether subject (user:alice) has relation on object (doc:42).

pub fn explain( &self, subject: &str, relation: &str, object: &str, ) -> Result<Option<Vec<String>>, AuthzError>

Like check, with the path that granted it: each step object#relation, ending with the tuple that named the subject.

pub fn check_subject( &self, subject: &Subject, relation: &str, object: &ObjectRef, ) -> Result<bool, AuthzError>

check with a subject and object already parsed — for a caller, so an id is never re-read as text.

pub fn explain_subject( &self, subject: &Subject, relation: &str, object: &ObjectRef, ) -> Result<Option<Vec<String>>, AuthzError>

explain with parsed parts.

Trait Implementations

impl Clone for Authorizer

fn clone(&self) -> Authorizer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Authorizer

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.