Struct ResourceAuthorization 

pub struct ResourceAuthorization { /* private fields */ }

Authorization policy that maps route patterns to allowed roles and permissions.

• resource_key →allowed_roles: users with ANY of these roles are granted access.
• resource_key →required_permissions: users with ANY of these permissions are granted access.

A user is authorized if they have at least one matching role OR at least one matching permission.

Implementations

impl ResourceAuthorization

pub fn new() -> Self

Create a new, empty authorization policy.

pub fn allow_role( self, resource_key: impl Into<String>, role: impl Into<String>, ) -> Self

Allow a specific role to access a resource.

resource_key is the route pattern (e.g., "/api/users").

pub fn allow_permission( self, resource_key: impl Into<String>, permission: impl Into<String>, ) -> Self

Require a specific permission to access a resource.

Trait Implementations

impl Default for ResourceAuthorization

fn default() -> Self

Returns the “default value” for a type.

impl IAuthorizationPolicy for ResourceAuthorization

fn authorize<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 self, claims: &'life1 dyn IClaims, resource_key: &'life2 str, _method: &'life3 str, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Check if the authenticated user can access the resource.