Enum Role 

pub enum Role {
    Admin,
    Initiator,
    Application,
    Reader,
    Monitor,
}

Roles that determine endpoint access permissions.

Hierarchy (most to least privileged):

• Admin — full management access, can assign any role
• Initiator — can manage ACL entries and application contexts
• Application — standard API access (sign, cache write) within allowed contexts
• Reader — read-only access to keys, contexts, DIDs within allowed contexts
• Monitor — infrastructure-only: metrics and health endpoints

Variants

Admin

Initiator

Application

Reader

Monitor

Monitor is the least-privileged role and the natural default for a Default::default() AuthClaims (typically used in tests or pre-authentication scaffolding). A test fixture that leaks past its expected reach now lands on the most-restricted role rather than the most-privileged.

Implementations

impl Role

pub fn parse(s: &str) -> Result<Self, AppError>

Parse a role from its string representation.

Trait Implementations

impl Clone for Role

fn clone(&self) -> Role

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Role

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Role

fn default() -> Role

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Role

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Role

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Role

fn eq(&self, other: &Role) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Role

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Role