Struct RbacEngine 

pub struct RbacEngine { /* private fields */ }

A compiled, fast-lookup RBAC engine.

After construction from an RbacPolicy, the engine pre-computes:

• Effective permissions per role (with inheritance flattened).
• Subject → role mappings.

Every check() call does O(roles × patterns) work — fast enough for the sizes of policies used in AI agent deployments.

Implementations

impl RbacEngine

pub fn new(policy: RbacPolicy) -> Result<Self, String>

Build an engine from a validated RbacPolicy.

Returns an error if the policy fails validation.

pub fn from_yaml(yaml: &str) -> Result<Self, String>

Load an engine directly from a YAML string.

Trait Implementations

impl PolicyEngine for RbacEngine

fn check(&self, subject: &str, action: &str, resource: &str) -> PolicyResult

Evaluate whether subject may perform action on resource.

fn with_fallback(self, fallback: Arc<dyn PolicyEngine>) -> FallbackEngine<Self>

where Self: Sized,

Compose this engine with a fallback.