Struct DataPermissionInterceptor 

pub struct DataPermissionInterceptor { /* private fields */ }

数据权限拦截器 — 注册多个规则并应用到 SQL

工作流程

1. 调用方注册多个 PermissionRule
2. 在执行 SQL 前，调用 apply_to_select / apply_to_update / apply_to_delete
3. 拦截器按注册顺序依次调用每个 PermissionRule.apply()
4. 将所有非 None 的子句用 AND 连接，追加到原 SQL 的 WHERE 子句

示例

use sz_orm_query::data_permission::{
    DataPermissionInterceptor, PermissionContext, TenantIsolation, OwnerOnly,
};

let mut interceptor = DataPermissionInterceptor::new();
interceptor.register(Box::new(TenantIsolation::default_field()));
interceptor.register(Box::new(OwnerOnly::default_field()));

let ctx = PermissionContext::new().with_user_id(100).with_tenant_id(5);
let sql = interceptor.apply_to_select("SELECT * FROM orders", &ctx).unwrap();
assert!(sql.contains("WHERE"));
assert!(sql.contains("tenant_id = 5"));
assert!(sql.contains("user_id = 100"));

Implementations

impl DataPermissionInterceptor

pub fn new() -> DataPermissionInterceptor

创建空拦截器

pub fn register(&mut self, rule: Box<dyn PermissionRule>)

注册规则

pub fn count(&self) -> usize

已注册规则数量

pub fn names(&self) -> Vec<&'static str>

列出所有规则名称

pub fn collect_clauses( &self, ctx: &PermissionContext, ) -> Result<Vec<String>, PermissionError>

收集所有规则的 WHERE 子句（按注册顺序，跳过 None）

pub fn apply_to_select( &self, sql: &str, ctx: &PermissionContext, ) -> Result<String, PermissionError>

将规则应用到 SELECT 语句

• 原 SQL 无 WHERE 子句：追加 WHERE clause1 AND clause2 ...
• 原 SQL 有 WHERE 子句：在 WHERE 后追加 (原条件) AND (clause1 AND clause2 ...)

pub fn apply_to_update( &self, sql: &str, ctx: &PermissionContext, ) -> Result<String, PermissionError>

将规则应用到 UPDATE 语句

pub fn apply_to_delete( &self, sql: &str, ctx: &PermissionContext, ) -> Result<String, PermissionError>

将规则应用到 DELETE 语句

Trait Implementations

impl Default for DataPermissionInterceptor

fn default() -> DataPermissionInterceptor

Returns the “default value” for a type.