Enum DenialBehavior 

pub enum DenialBehavior {
    NotFound,
    Unauthorized,
    Custom(Arc<dyn Fn(&str) -> Error + Send + Sync>),
}

Behavior when a filtered capability is accessed directly.

Variants

NotFound

Return “method not found” error – hides the capability entirely.

This is the default and recommended for security. Use this in multi-tenant scenarios where tools should not be discoverable by unauthorized users.

Unauthorized

Return an “unauthorized” error, revealing the capability exists.

Use this when the client should know about the capability but is not permitted to invoke it (e.g., premium features behind an upgrade prompt).

Custom(Arc<dyn Fn(&str) -> Error + Send + Sync>)

Use a custom error generator for application-specific responses.

Use this when you need custom status codes, domain-specific error messages, or structured error payloads.

Implementations

impl DenialBehavior

pub fn custom<F>(f: F) -> Self

where F: Fn(&str) -> Error + Send + Sync + 'static,

Create a custom denial behavior with the given error generator.

pub fn to_error(&self, name: &str) -> Error

Generate the appropriate error for a denied capability.

Trait Implementations

impl Clone for DenialBehavior

fn clone(&self) -> DenialBehavior

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DenialBehavior

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DenialBehavior

fn default() -> DenialBehavior

Returns the “default value” for a type.