Struct CollectionPolicyConfig 

pub struct CollectionPolicyConfig {
    pub owner: Option<String>,
    pub create: Option<String>,
    pub update: Option<String>,
    pub delete: Option<String>,
    pub read: Option<String>,
    pub filter: Option<String>,
    pub fields: FieldRulesConfig,
}

Raw per-collection authorization policy — one per [collections.name] in what.toml. Semantic validation (reserved words, invalid combinations) happens when the PolicyRegistry is built at startup, so errors fail loud with the collection name.

Example (what.toml)

[collections.notes]
create = "all"
update = "owner"
delete = "owner, admin"
read   = "owner"

[collections.orders]
filter = "org_id=#user.org_id#"
fields.private = ["internal_margin"]

Fields

owner: Option<String>

Ownership mode: “auto” (default — stamp _owner on create) or “none”

create: Option<String>

Who may create records: “all” | “user” | “none” | role list (“editor, admin”)

update: Option<String>

Who may update records: adds “owner” to the create vocabulary

delete: Option<String>

Who may delete records

read: Option<String>

Who may read records — owner/user/roles force a WHERE scope on every fetch

filter: Option<String>

Forced filter AND-ed into every read and checked on mutations. Supports #user.*# / #session.*# interpolation, e.g. “org_id=#user.org_id#”

fields: FieldRulesConfig

Field-level rules

Trait Implementations

impl Clone for CollectionPolicyConfig

fn clone(&self) -> CollectionPolicyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CollectionPolicyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CollectionPolicyConfig

fn default() -> CollectionPolicyConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CollectionPolicyConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.