Struct EffectiveRights 

pub struct EffectiveRights { /* private fields */ }

The rights one subject holds on one resource, closed under implication.

Implication (§4.2): own ⇒ maintain ⇒ commit on the same resource, and ns.admin ⇒ create plus own on every repository in the namespace. The VTC evaluates this before projecting; it is repeated here so an adapter handed a partial set (say, own alone) still maps it correctly.

Implication decides what a person may do, not which forge role they get. A namespace admin gets no role on the forge (decided 2026-09-25): git.ns.admin is exercised through the VTC and the bridge, never as an organisation owner or a repository role. So the rights ns.admin implies are held but never projected; only a repository right granted in its own name (own, maintain, commit.sign) reaches a forge role.

Two values are equal when they hold the same rights and project the same ones — i.e. when their canonical grants are equal. [ns.admin] and [ns.admin, own] hold the same rights but are different values: only the second projects own. Serialised as the canonical grants, so a round trip is the identity.

Implementations

impl EffectiveRights

pub const NONE: EffectiveRights

No rights at all.

pub fn from_granted(granted: impl IntoIterator<Item = Right>) -> Self

The closure of granted under implication.

pub fn insert(&mut self, right: Right)

Add a right and everything it implies.

pub fn holds(self, right: Right) -> bool

Whether right is held (directly or by implication).

pub fn is_empty(self) -> bool

Whether nothing is held.

pub fn iter(self) -> impl Iterator<Item = Right>

Held rights, broadest first.

pub fn repo_tier(self) -> Option<Right>

The repository-level tier held, by any route (including ns.admin’s implied own): own, then maintain, then commit. None when none of those is held. For authorisation; the forge role comes from EffectiveRights::forge_tier.

pub fn forge_tier(self) -> Option<Right>

The repository-level tier that decides the forge role: own, then maintain, then commit, from repository rights granted in their own name. ns.admin alone gives None — a namespace admin gets no forge role.

pub fn granted(self) -> Vec<Right>

The smallest set of grants this value is the closure of, broadest first: ns.admin if held; repo.create if held and not implied by ns.admin; and the highest repository right granted in its own name. EffectiveRights::from_granted(x.granted()) == x for every x.

Trait Implementations

impl Clone for EffectiveRights

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for EffectiveRights

impl Debug for EffectiveRights

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EffectiveRights

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for EffectiveRights

fn deserialize<D: Deserializer<'de>>(d: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Eq for EffectiveRights

impl Hash for EffectiveRights

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for EffectiveRights

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for EffectiveRights

As the canonical grants, not every held right: writing the rights ns.admin implies would read back as repository rights granted in their own name, and project.

fn serialize<S: Serializer>(&self, s: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for EffectiveRights