Struct TenantContext 

pub struct TenantContext { /* private fields */ }

Extracted from every authenticated request. Cannot be constructed outside the auth module (fields are private). All repository methods require this — the type system prevents cross-tenant data access.

Implementations

impl TenantContext

pub fn new( tenant_id: TenantId, user_id: UserId, role: UserRole, tier: SubscriptionTier, ) -> Self

Construct from a verified auth token. In production, this is called only by the auth middleware after JWT verification.

pub fn tenant_id(&self) -> &TenantId

pub fn user_id(&self) -> &UserId

pub fn role(&self) -> &UserRole

pub fn tier(&self) -> &SubscriptionTier

pub fn can(&self, action: Action, resource: Resource) -> bool

Check if the user can perform an action on a resource.

pub fn tier_includes(&self, required_tier: &SubscriptionTier) -> bool

Check if the tenant’s tier includes a feature at required_tier.

Trait Implementations

impl Clone for TenantContext

fn clone(&self) -> TenantContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TenantContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TenantContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TenantContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.