Skip to main content

gate

spacedb_access

Function gate 

Source 
pub fn gate(
    policy: &AccessPolicy,
    chain: Option<&CapabilityChain>,
    request: &AccessRequest<'_>,
    directory: &dyn KeyDirectory,
    now_unix: u64,
    revocations: &RevocationSet,
) -> AccessResult<Decision>
Expand description

Decide an access under policy + capabilities.

  • A roster member performing a pure read is allowed with no capability.
  • Otherwise a capability chain is required; it is authorized normally (signature · narrowing · revocation · scope · ops · expiry).
  • If require_accountable_root, the chain must root at a roster member.