Struct AuthorizationService 

pub struct AuthorizationService<R, G>
where
    R: AccessHierarchy + Eq + Display,
    G: Eq + Clone,
{ /* private fields */ }

Service that evaluates an AccessPolicy against an Account.

This is the runtime piece of the authorization model in webgates-core. You define the rule with AccessPolicy, then ask AuthorizationService whether a specific account satisfies it.

Implementations

impl<R, G> AuthorizationService<R, G>

where R: AccessHierarchy + Eq + Display, G: Eq + Clone,

pub fn new(policy: AccessPolicy<R, G>) -> Self

Creates a new authorization service for the provided policy.

pub fn is_authorized(&self, account: &Account<R, G>) -> bool

Returns true when the account satisfies the policy.

Policies use OR semantics across requirement categories:

• exact role matches
• role hierarchy matches
• group membership matches
• permission matches

pub fn meets_role_requirement(&self, account: &Account<R, G>) -> bool

Returns true when the account has any exactly required role.

pub fn meets_role_hierarchy_requirement(&self, account: &Account<R, G>) -> bool

Returns true when the account has any role that satisfies a same-or-supervisor requirement.

Ordering contract: higher privilege is greater than lower privilege, so a supervising role satisfies user_role >= required_role.

pub fn meets_group_requirement(&self, account: &Account<R, G>) -> bool

Returns true when the account belongs to any required group.

pub fn meets_permission_requirement(&self, account: &Account<R, G>) -> bool

Returns true when the account has any required permission.

pub fn policy_denies_all_access(&self) -> bool

Returns true when the configured policy has no requirements.

Such a policy denies all access.

pub fn clone_policy(&self) -> AccessPolicy<R, G>

Returns a clone of the configured policy.

Trait Implementations

impl<R, G> Clone for AuthorizationService<R, G>

where R: AccessHierarchy + Eq + Display + Clone, G: Eq + Clone + Clone,

fn clone(&self) -> AuthorizationService<R, G>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<R, G> Debug for AuthorizationService<R, G>

where R: AccessHierarchy + Eq + Display + Debug, G: Eq + Clone + Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.