Struct Policy 

pub struct Policy {
    pub triggerables: Option<HashMap<String, Value>>,
    pub triggerables_v2: Option<HashMap<String, Value>>,
    pub s3_inputs: Option<Vec<Value>>,
    pub allowed_s3_keys: Option<Vec<PolicyAllowedS3KeysInner>>,
    pub execution_mode: Option<ExecutionMode>,
    pub on_behalf_of: Option<String>,
    pub on_behalf_of_email: Option<String>,
    pub sandbox: Option<bool>,
    pub frontend_sdk_scopes: Option<Vec<String>>,
}

Fields

triggerables: Option<HashMap<String, Value>>

triggerables_v2: Option<HashMap<String, Value>>

s3_inputs: Option<Vec<Value>>

allowed_s3_keys: Option<Vec<PolicyAllowedS3KeysInner>>

execution_mode: Option<ExecutionMode>

Who the app’s runnables execute as. Optional, and what omitting it means depends on the operation: creating an app defaults it to publisher (runs on behalf of the app’s publisher and requires an authenticated viewer), while updating one keeps the mode the app is already deployed under. Either way anonymous, which makes the app publicly executable, is never assumed

on_behalf_of: Option<String>

on_behalf_of_email: Option<String>

sandbox: Option<bool>

Publisher opt-in to app sandbox isolation (alpha). When true the app is isolated from each viewer’s Windmill session. When false/absent the app runs same-origin with the viewer’s full session (the default, pre-isolation behavior).

frontend_sdk_scopes: Option<Vec<String>>

Raw apps: author-declared scopes for the frontend SDK token. Takes effect only when sandbox is also true — an unsandboxed bundle runs with the viewer’s own session, so no token is advertised or minted for it and this list stays inert. On a sandboxed app a non-empty list lets viewers mint (after consenting) a short-lived token carrying their own identity restricted to these scopes, handed to the app bundle so windmill-client calls run as the viewer. Must be a subset of the server’s curated allowlist (jobs:run, jobs:read, users:read, resources:read, variables:read).

Implementations

impl Policy

pub fn new() -> Policy

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Policy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Policy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Policy

fn eq(&self, other: &Policy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Policy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Policy