Module roles 

Role definitions and membership semantics over explicit catalog values.

Re-exports

pub use identity::RoleReference;

pub use memberships::role_can_set;

pub use memberships::role_inherits;

Modules

definition

Role declaration candidates, authorization and requested-name binding.

dependencies

Role references of the catalog: the retained registries that name roles, and the roles that session-local relations reference. DROP ROLE reports what depends on a role from the catalog’s shared dependencies.

guards

Retained read guards for role and membership catalogs during authorization and publication.

identity

Role incarnations and authorization subjects over an explicit role catalog.

inquiry

Role privilege inquiry with ordered session and retained catalog reads.

memberships

rename

Role renaming validates names and authority without changing the selected incarnation.

restoration

Validation of persisted role keys and membership identities.

session

Session authorization identities and independently restorable role settings.

tuple

A definition mutation retains its originally selected catalog tuple, independently of role authority.

Structs

RoleDefinition

RoleIdentity

A catalog reference retains both the public OID and the role incarnation.

RoleMembership

RoleMembershipKey

Traits

RoleReferenceNames

Selected identities used by SQL current-user, session-user and authenticated-role references.

Functions

require_role_exists

require_set_role

resolve_acl_role_specification

resolve_role_specification