Enum FlowPolicy 

pub enum FlowPolicy {
    AllowAll,
    DenyAll,
    AllowRoles(BTreeSet<String>),
    DenyRoles(BTreeSet<String>),
    Predicate(Box<dyn FlowPolicyFn>),
    PredicateExpr(FlowPredicate),
}

Information-flow policy used by epistemic check.

Variants

AllowAll

Permit all facts to all roles.

DenyAll

Deny all flows.

AllowRoles(BTreeSet<String>)

Permit only listed roles.

DenyRoles(BTreeSet<String>)

Deny listed roles.

Predicate(Box<dyn FlowPolicyFn>)

Runtime closure policy: Predicate(Box<dyn Fn(&Knowledge, &Role) -> bool>).

PredicateExpr(FlowPredicate)

Serializable knowledge-dependent predicate policy.

Implementations

impl FlowPolicy

pub fn predicate<F>(predicate: F) -> Self

where F: Fn(&KnowledgeFact, &str) -> bool + Clone + Send + Sync + 'static,

Build a runtime closure-based flow predicate policy.

impl FlowPolicy

pub fn allows(&self, target_role: &str) -> bool

Check whether knowledge flow to target_role is permitted.

pub fn allows_knowledge( &self, knowledge: &KnowledgeFact, target_role: &str, ) -> bool

Check whether a concrete knowledge fact may flow to a target role.

Trait Implementations

impl Clone for FlowPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FlowPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for FlowPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for FlowPolicy

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for FlowPolicy

impl PartialEq for FlowPolicy

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for FlowPolicy

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.