Struct Policy 

pub struct Policy {
    pub triggerables: Option<HashMap<String, Value>>,
    pub triggerables_v2: Option<HashMap<String, Value>>,
    pub s3_inputs: Option<Vec<Value>>,
    pub allowed_s3_keys: Option<Vec<PolicyAllowedS3KeysInner>>,
    pub execution_mode: Option<ExecutionMode>,
    pub on_behalf_of: Option<String>,
    pub on_behalf_of_email: Option<String>,
    pub sandbox: Option<bool>,
    pub frontend_sdk_scopes: Option<Vec<String>>,
}

Fields

triggerables: Option<HashMap<String, Value>>

triggerables_v2: Option<HashMap<String, Value>>

s3_inputs: Option<Vec<Value>>

allowed_s3_keys: Option<Vec<PolicyAllowedS3KeysInner>>

execution_mode: Option<ExecutionMode>

on_behalf_of: Option<String>

on_behalf_of_email: Option<String>

sandbox: Option<bool>

Publisher opt-in to app sandbox isolation (alpha). When true the app is isolated from each viewer’s Windmill session. When false/absent the app runs same-origin with the viewer’s full session (the default, pre-isolation behavior).

frontend_sdk_scopes: Option<Vec<String>>

Raw apps: author-declared scopes for the frontend SDK token. Takes effect only when sandbox is also true — an unsandboxed bundle runs with the viewer’s own session, so no token is advertised or minted for it and this list stays inert. On a sandboxed app a non-empty list lets viewers mint (after consenting) a short-lived token carrying their own identity restricted to these scopes, handed to the app bundle so windmill-client calls run as the viewer. Must be a subset of the server’s curated allowlist (jobs:run, jobs:read, users:read, resources:read, variables:read).

Implementations

impl Policy

pub fn new() -> Policy

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Policy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Policy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Policy

fn eq(&self, other: &Policy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Policy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Policy