Struct RbacEngine 

pub struct RbacEngine { /* private fields */ }

A compiled, fast-lookup RBAC engine.

After construction from an RbacPolicy, the engine pre-computes:

• Effective permissions per role (with inheritance flattened).
• Subject → role mappings.

Every check() call does O(roles × patterns) work — fast enough for the sizes of policies used in AI agent deployments.

Implementations

impl RbacEngine

pub fn new(policy: RbacPolicy) -> Result<Self, String>

Build an engine from a validated RbacPolicy.

Returns an error if the policy fails validation.

pub fn from_yaml(yaml: &str) -> Result<Self, String>

Load an engine directly from a YAML string.

Trait Implementations

impl PolicyEngine for RbacEngine

fn check( &self, subject: &SubjectId, action: &str, resource: &ResourceId, ) -> PolicyResult

Evaluate whether subject may perform action on resource.

fn check_async<'a>( &'a self, subject: &'a SubjectId, action: &'a str, resource: &'a ResourceId, ) -> Pin<Box<dyn Future<Output = PolicyResult> + Send + 'a>>

Evaluate whether subject may perform action on resource asynchronously.

fn check_with_context( &self, subject: &SubjectId, action: &str, resource: &ResourceId, _ctx: &RequestContext, ) -> PolicyResult

Evaluate a request with runtime context.

fn check_with_context_async<'a>( &'a self, subject: &'a SubjectId, action: &'a str, resource: &'a ResourceId, ctx: &'a RequestContext, ) -> Pin<Box<dyn Future<Output = PolicyResult> + Send + 'a>>

Evaluate a request with runtime context asynchronously.

fn with_fallback(self, fallback: Arc<dyn PolicyEngine>) -> FallbackEngine<Self>

where Self: Sized,

Compose this engine with a fallback.