Enum Operation 

#[non_exhaustive]
pub enum Operation {
    Read,
    Write,
    Execute,
    Delete,
    Create,
    Stat,
    Chmod,
    ChownUid,
    ChownGid,
    SetXattr {
        namespace: XattrNamespace,
    },
}

Operation being attempted on the target path.

Determines which permission bits to check and whether the check Redirects to the parent directory (for Delete and Create).

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Read

Read file contents or list directory entries. Requires r.

Write

Write file contents, truncate, or modify. Requires w.

Execute

Execute a binary or traverse a directory. Requires x.

Delete

Remove a file or directory. Checks w+x on parent.

Create

Create a new file or directory. Checks w+x on parent.

Stat

Stat/metadata read. Requires only path traversal (+x on ancestors).

Chmod

Change file mode bits (chmod). Gated by ownership or CAP_FOWNER.

ChownUid

Change file owner UID (chown). Requires CAP_CHOWN.

ChownGid

Change file owner GID (chown). Owner-in-group or CAP_CHOWN.

SetXattr

Set extended attribute (setxattr). Gated by namespace.

Fields

namespace: XattrNamespace

Xattr namespace determines the capability required.

Implementations

impl Operation

pub fn is_metadata(&self) -> bool

Returns true if this operation uses the metadata check path.

Metadata ops bypass DAC mode-bit checks; they evaluate ownership and capability rules directly. New variants MUST be added here — no wildcard arm permitted (clippy::wildcard_enum_match_arm is denied).

pub fn checks_parent(&self) -> bool

Returns true if this operation checks the parent directory Rather than the target itself.

Delete and Create require w+x on parent, not target.

pub fn target_component(&self, walk_len: usize) -> Option<usize>

Index into path walk of the component to check.

For most operations, last component (target). for Delete and Create, second-to-last (parent directory). Returns None if Walk is empty or too short for a parent-directed operation.

Trait Implementations

impl Clone for Operation

fn clone(&self) -> Operation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Operation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Operation

fn eq(&self, other: &Operation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Operation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for Operation

impl Eq for Operation

impl StructuralPartialEq for Operation