Struct RbacAuthorizer 

pub struct RbacAuthorizer { /* private fields */ }

Role-based authorizer backed by a role -> permissions map.

Implementations

impl RbacAuthorizer

pub fn new() -> Self

Creates a new authorizer with the admin role granted the * wildcard.

pub fn with_role_permission(self, role: &str, permission: &str) -> Self

Grants permission to role. Returns self for chaining.

pub fn grant(&mut self, role: &str, permission: &str)

Grants permission to role in place.

pub fn revoke(&mut self, role: &str, permission: &str)

Revokes permission from role if present.

pub fn role_has_permission(&self, role: &str, permission: &str) -> bool

Returns true if role has been granted permission (or the wildcard).

pub fn permissions_for_role(&self, role: &str) -> Vec<String>

Returns all permissions currently attached to role.

Trait Implementations

impl Authorizer for RbacAuthorizer

fn can( &self, user: &User, action: &str, resource: &str, ) -> Result<bool, AuthError>

Returns Ok(true) if user is allowed to perform action on resource.

impl Default for RbacAuthorizer

fn default() -> Self

Returns the “default value” for a type.