Enum Role 

#[non_exhaustive]
pub enum Role {
    SuperAdmin,
    Admin,
    Editor,
    Viewer,
}

Framework-owned roles. #[non_exhaustive] because we may introduce additional built-in tiers (e.g. Auditor) in a minor release; downstream code must not rely on exhaustive matching.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

SuperAdmin

Unrestricted access. The legacy "admin" role value resolves to this tier for back-compat.

Admin

Full read/write on application models; view-only on framework system tables (rustio_users, sessions, audit log).

Editor

View / create / edit on application models; no delete anywhere; view on system tables.

Viewer

View-only on every accessible model.

Implementations

impl Role

pub fn from_role_string(s: &str) -> Option<Role>

Parse the stored rustio_users.role column value. Returns None for values that grant no admin access (empty, "user", or an unknown string). Case-insensitive; accepts a few reasonable aliases (super_admin, super-admin).

pub fn as_str(self) -> &'static str

Canonical wire string for the role, matching the values Self::from_role_string produces. Note this is not lossless with the legacy mapping — Role::SuperAdmin serialises to "superadmin", while the legacy value "admin" also parses back as Role::SuperAdmin.

pub fn display_name(self) -> &'static str

Human-readable label for the role, suitable for rendering in the admin header. Unlike Self::as_str, this is purely cosmetic.

pub fn permissions_for(self, model_table: &str) -> PermissionSet

Resolve the permission matrix for this role on a specific model table. model_table is the raw SQL table name as it appears in the schema (e.g. "posts", "rustio_users"). Unknown models get the same defaults as any app table — the caller is responsible for 404-ing models the schema doesn’t know about.

pub fn can(self, model_table: &str, action: Permission) -> bool

Shorthand for permissions_for(table).allows(action).

Trait Implementations

impl Clone for Role

fn clone(&self) -> Role

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Role

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Role

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for Role

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for Role

fn eq(&self, other: &Role) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for Role

impl Eq for Role

impl StructuralPartialEq for Role