Enum AccessScope 

pub enum AccessScope {
    Admin,
    User,
    Unknown,
}

Permission tier carried alongside AgentScope in PolicyContext.

AgentScope answers “who is acting” (user vs system process identity); AccessScope answers “what permission tier is granted to this invocation” (admin, plain user, unknown). The two are orthogonal — a system actor may have any tier, a user actor may be admin or plain — so they live as separate fields rather than a cartesian enum.

The source-of-truth producer today is the agent YAML loader (extensions/web/admin/.../governance/scope.rs::resolve_agent_scope). Unknown is the documented fallback when no oauth.scopes entry is declared on the agent card.

Variants

Admin

User

Unknown

Implementations

impl AccessScope

pub const fn as_str(self) -> &'static str

Trait Implementations

impl Clone for AccessScope

fn clone(&self) -> AccessScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'r> Decode<'r, Postgres> for AccessScope

fn decode( value: PgValueRef<'r>, ) -> Result<Self, Box<dyn Error + Send + Sync + 'static>>

Decode a new value of this type using a raw value from the database.

impl<'de> Deserialize<'de> for AccessScope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for AccessScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'q, DB: Database> Encode<'q, DB> for AccessScope

where &'q str: Encode<'q, DB>,

fn encode_by_ref( &self, buf: &mut <DB as Database>::ArgumentBuffer<'q>, ) -> Result<IsNull, BoxDynError>

Writes the value of self into buf without moving self.

fn size_hint(&self) -> usize

fn encode( self, buf: &mut <DB as Database>::ArgumentBuffer<'q>, ) -> Result<IsNull, Box<dyn Error + Sync + Send>>

where Self: Sized,

Writes the value of self into buf in the expected format for the database.

fn produces(&self) -> Option<<DB as Database>::TypeInfo>

impl FromStr for AccessScope

type Err = AuthzError

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl Hash for AccessScope

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for AccessScope

fn eq(&self, other: &AccessScope) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PgHasArrayType for AccessScope

fn array_type_info() -> PgTypeInfo

fn array_compatible(ty: &PgTypeInfo) -> bool

impl Serialize for AccessScope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Type<Postgres> for AccessScope

fn type_info() -> PgTypeInfo

Returns the canonical SQL type for this Rust type.

fn compatible(ty: &<DB as Database>::TypeInfo) -> bool

Determines if this Rust type is compatible with the given SQL type.

impl Copy for AccessScope

impl Eq for AccessScope

impl StructuralPartialEq for AccessScope