Struct AccessContext 

pub struct AccessContext {
    pub user_id: Option<String>,
    pub groups: Vec<String>,
    pub organization_id: Option<String>,
}

The identity a retrieval is performed as — the requester’s entitlements.

Built from the authenticated user and the groups they belong to (resolved upstream from the auth context). Passed into the knowledge-retrieval path so results can be filtered by AccessContext::can_access.

Org scoping (organization_id)

The within-org user/group ACL (can_access) is the operator’s single-tenant default and does not consult the org. A multi-tenant relational host (e.g. SmooAI), however, needs the turn’s org to scope RAG to that tenant’s documents — its StorageAdapter::knowledge_for_access reads access.organization_id to pick the right tenant before any user/group filtering. So the org rides on the AccessContext purely to be available to a host adapter; the built-in ACL path ignores it (org isolation already happened upstream — every knowledge row carries an organizationId the backend filters on). None ⇒ “no org resolved”, which a single-tenant adapter treats exactly as today.

Fields

user_id: Option<String>

The requester’s user id, if authenticated as a user. None for an anonymous / system requester (which then only sees public + no-ACL docs).

groups: Vec<String>

The groups the requester belongs to.

organization_id: Option<String>

The organization this turn is scoped to, when resolved. Carried so a multi-tenant host adapter’s knowledge_for_access can scope retrieval to the right tenant; the operator’s built-in ACL ignores it (see the type-level “Org scoping” note). None when no org is resolved (the single-tenant / anonymous default).

Implementations

impl AccessContext

pub fn new(user_id: Option<String>, groups: Vec<String>) -> Self

Build a context from an optional user id and a set of groups. The org is left unset (None); use with_organization_id to attach the turn’s org for a multi-tenant host.

pub fn for_user(user_id: impl Into<String>) -> Self

A context for a specific user with no group memberships.

pub fn anonymous() -> Self

An anonymous requester: no user id, no groups. Sees only public and no-ACL (org-public) documents.

pub fn with_group(self, group: impl Into<String>) -> Self

Add a group membership (builder).

pub fn with_organization_id(self, organization_id: impl Into<String>) -> Self

Attach the turn’s organization (builder). Carried so a multi-tenant host adapter’s knowledge_for_access can scope retrieval to that tenant. The operator’s built-in ACL ignores it (see the type-level “Org scoping” note), so this is behavior-preserving for the single-tenant default.

pub fn can_access(&self, acl: &DocAcl) -> bool

Whether this requester may read a document with the given DocAcl.

true when the doc is public, or the requester’s user id is in the allow-list, or any of the requester’s groups is in the allow-list.

Trait Implementations

impl Clone for AccessContext

fn clone(&self) -> AccessContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AccessContext

fn default() -> AccessContext

Returns the “default value” for a type.

impl Eq for AccessContext

impl PartialEq for AccessContext

fn eq(&self, other: &AccessContext) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AccessContext