Struct PermissionDenied 

#[non_exhaustive]
pub struct PermissionDenied {
    pub caller: String,
    pub capability: String,
    pub reason: String,
    /* private fields */
}

Marker for a capability denial that should surface to the guest as the built-in PermissionDeniedError subclass, carrying the structured fields policy-aware recovery code reads (e.capability, e.caller, e.reason). Same contract as RangeError.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

caller: String

capability: String

reason: String

Implementations

impl PermissionDenied

pub fn is_policy(&self) -> bool

Whether the operator’s policy refused, as opposed to a runtime invariant refusing ahead of it. A caller that treats a denial as a filter rather than an error — session.list omitting keys the policy hides — must act only on the policy’s answer; an invariant denial means the check itself could not be made, which no filter may swallow.

Trait Implementations

impl Debug for PermissionDenied

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for PermissionDenied

fn fmt(&self, f: &mut Formatter<'_>) -> Result

The denial message an LLM sees. The closing paragraph is load-bearing: observed models treat a denial as an obstacle and reroute through raw HTTP or another package, so the message itself must say the decision is final. The two variants differ in what “final” means — a policy decision is the operator’s to change, an invariant is nobody’s.

impl Error for PermissionDenied

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.