Enum KeyScope 

pub enum KeyScope {
    AllInScope,
    Keys(BTreeSet<String>),
}

An entry’s authority over signing-oracle key ids — the effective decision decoded from the stored allowed_keys member (#818).

This is the actor-scoped complement of ContextPolicy.signable_keys (which is resource-bound and constrains every actor uniformly): it narrows which keys this caller may invoke the signing oracle on, and it only ever intersects with the context scope — a key named in the filter that lies outside the entry’s contexts stays unreachable.

Exists for the same reason ActScope does: Option<BTreeSet<String>> has an empty-vs-absent distinction that a bare is_empty() gets backwards (see docs/05-design-notes/acl-scope-semantics.md). Decode once through key_scope_for / AclEntry::key_scope, then ask KeyScope::allows — never test emptiness at a call site.

Variants

AllInScope

No per-key filter: every key the entry’s context scope reaches. This is the decode of an absent (None) allowed_keys — the behaviour of every entry that pre-dates the member.

Keys(BTreeSet<String>)

Exactly these key ids (still intersected with the context scope). The decode of a present allowed_keys, including the empty set: Some([]) authorizes no keys — the narrowest grant, the opposite of absent, and deliberately not a wildcard.

Implementations

impl KeyScope

pub fn allows(&self, key_id: &str) -> bool

May this scope invoke the signing oracle on key_id?

AllInScope defers entirely to the context gates that ran before it; Keys is exact membership. Keys(∅) therefore allows nothing, which is the point — the empty filter can never read as unrestricted.

Trait Implementations

impl Clone for KeyScope

fn clone(&self) -> KeyScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for KeyScope

impl PartialEq for KeyScope

fn eq(&self, other: &KeyScope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for KeyScope