Enum DenyReason 

pub enum DenyReason {
    UserDeny {
        entity: EntityRef,
        user_id: UserId,
        justification: Option<String>,
    },
    RoleDeny {
        entity: EntityRef,
        role: String,
        justification: Option<String>,
    },
    NotAssigned {
        entity: EntityRef,
        user_id: UserId,
        roles: Vec<String>,
    },
    UnknownEntity {
        entity: EntityRef,
    },
    HookUnavailable {
        policy: String,
    },
    PolicyViolation {
        policy: String,
        detail: Cow<'static, str>,
    },
    SecretLeak {
        pattern_id: SecretPatternId,
        pattern_name: Cow<'static, str>,
        location: SecretLocation,
    },
    ScopeViolation {
        tool: McpToolName,
        required: AccessScope,
    },
    ToolBlocked {
        tool: McpToolName,
        list_id: String,
    },
    RateLimitExceeded {
        window: RateLimitWindow,
        retry_after_ms: u64,
    },
}

Structured deny rationale.

Variants cover both the user→entity resolver (UserDeny, RoleDeny, NotAssigned, UnknownEntity), the hook plane (HookUnavailable), and the tool-use governance chain (SecretLeak, ScopeViolation, ToolBlocked, RateLimitExceeded). The human-readable #[error] strings double as the reason column in the governance_decisions audit row.

Variants

UserDeny

Fields

entity: EntityRef

user_id: UserId

justification: Option<String>

RoleDeny

Fields

entity: EntityRef

role: String

justification: Option<String>

NotAssigned

Fields

entity: EntityRef

user_id: UserId

roles: Vec<String>

UnknownEntity

Fields

entity: EntityRef

HookUnavailable

Fields

policy: String

PolicyViolation

Deny issued by an extension authz hook (via register_authz_hook! or AppContextBuilder::with_authz_hook). The outer AuthzDecision::Deny.policy carries the policy identifier (e.g. "abac.itar"); detail is the human-readable reason.

Fields

policy: String

detail: Cow<'static, str>

SecretLeak

Fields

pattern_id: SecretPatternId

pattern_name: Cow<'static, str>

location: SecretLocation

ScopeViolation

Fields

tool: McpToolName

required: AccessScope

ToolBlocked

Fields

tool: McpToolName

list_id: String

RateLimitExceeded

Fields

window: RateLimitWindow

retry_after_ms: u64

Trait Implementations

impl Clone for DenyReason

fn clone(&self) -> DenyReason

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DenyReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DenyReason

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for DenyReason

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for DenyReason

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for DenyReason

fn eq(&self, other: &DenyReason) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for DenyReason

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for DenyReason

impl StructuralPartialEq for DenyReason