Struct GraphRule 

pub struct GraphRule {
    pub effect: RuleEffect,
    pub subject: Option<String>,
    pub subject_has_role: Option<String>,
    pub action: String,
    pub resource: String,
    pub conditions: GraphConditions,
}

One authored graph-policy rule: a subject/action/resource match plus optional graph-shaped conditions, yielding an allow or deny effect.

Fields

effect: RuleEffect

Whether a match grants (allow, the default) or forbids (deny).

subject: Option<String>

Match a literal subject id. Mutually informative with subject_has_role.

subject_has_role: Option<String>

Match any subject holding this role (via a HAS_ROLE edge in the graph).

action: String

Action this rule governs (e.g. write).

resource: String

Resource glob this rule governs (e.g. employee/private/*).

conditions: GraphConditions

Optional graph-shaped conditions (the where block) that must also hold.

Trait Implementations

impl Clone for GraphRule

fn clone(&self) -> GraphRule

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GraphRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for GraphRule

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for GraphRule

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.