Enum ApproveScope 

pub enum ApproveScope {
    None,
    All,
    Contexts(Vec<String>),
}

A DID’s authority to confer access through an approval — task-consent delegation (compute_delegated_contexts) and delegated step-up ratification (delegated_any_approver_covers) — without any authority to act.

Read only by those two conferral paths; it never feeds require_admin or has_context_access, so an approver can bless a change in a context while being unable to make one. This is the axis that lets an approver be least-privilege: role: Reader, allowed_contexts: [] (acts nowhere), approve_scope: All (may authorize anywhere).

Default ApproveScope::None: an entry confers nothing unless explicitly granted this — strictly additive and fail-closed. Pre-existing rows omit the field and deserialise as None.

Variants

None

Confers nothing (the default).

All

May confer any context — a cross-context authorizer. Granting this is super-admin-only (see vti_common::acl::validate_approve_scope_grant).

Contexts(Vec<String>)

May confer these contexts (and their subtrees), and only these.

Implementations

impl ApproveScope

pub fn covers(&self, context_id: &str) -> bool

Whether an approval by a holder of this scope may confer context_id.

Segment-aware ancestry, matching AuthClaims::has_context_access, so an approver scoped to a parent context covers its whole subtree.

pub fn confers_nothing(&self) -> bool

Whether this scope confers nothing.

Trait Implementations

impl Clone for ApproveScope

fn clone(&self) -> ApproveScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ApproveScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ApproveScope

fn default() -> ApproveScope

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ApproveScope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ApproveScope

impl PartialEq for ApproveScope

fn eq(&self, other: &ApproveScope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ApproveScope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ApproveScope