Struct Policy 

pub struct Policy {
    pub triggerables: Option<HashMap<String, Value>>,
    pub triggerables_v2: Option<HashMap<String, Value>>,
    pub s3_inputs: Option<Vec<Value>>,
    pub allowed_s3_keys: Option<Vec<PolicyAllowedS3KeysInner>>,
    pub execution_mode: Option<ExecutionMode>,
    pub on_behalf_of: Option<String>,
    pub on_behalf_of_email: Option<String>,
    pub sandbox: Option<bool>,
    pub frontend_sdk_scopes: Option<Vec<String>>,
}

Fields

triggerables: Option<HashMap<String, Value>>

triggerables_v2: Option<HashMap<String, Value>>

s3_inputs: Option<Vec<Value>>

allowed_s3_keys: Option<Vec<PolicyAllowedS3KeysInner>>

execution_mode: Option<ExecutionMode>

Who may open the app, and who its runnables execute as. Optional, and what omitting it means depends on the operation: creating an app defaults it to publisher (runs on behalf of the app’s publisher and requires an authenticated viewer), while updating one keeps the mode the app is already deployed under. Neither anonymous, which makes the app publicly executable, nor guest, which opens it to anyone the identity provider authenticates, is ever assumed. A guest is only admitted where the workspace also has guest_access_enabled, which is checked when the session is minted and again on every guest request

on_behalf_of: Option<String>

The user or group the app runs as in anonymous or publisher mode (e.g. ‘u/admin’ or ‘g/mygroup’). The authority for the app’s identity.

on_behalf_of_email: Option<String>

Address of on_behalf_of, written through from it on every save and returned as stored. Optional; when absent it is derived from on_behalf_of. Sending it is optional too; it must name the same account as on_behalf_of, and a pair that disagrees is rejected.

sandbox: Option<bool>

Publisher opt-in to app sandbox isolation (alpha). When true the app is isolated from each viewer’s Windmill session. When false/absent the app runs same-origin with the viewer’s full session (the default, pre-isolation behavior).

frontend_sdk_scopes: Option<Vec<String>>

Raw apps: author-declared scopes for the frontend SDK token. Takes effect only when sandbox is also true — an unsandboxed bundle runs with the viewer’s own session, so no token is advertised or minted for it and this list stays inert. On a sandboxed app a non-empty list lets viewers mint (after consenting) a short-lived token carrying their own identity restricted to these scopes, handed to the app bundle so windmill-client calls run as the viewer. Must be a subset of the server’s curated allowlist (jobs:run, jobs:read, users:read, resources:read, variables:read).

Implementations

impl Policy

pub fn new() -> Policy

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Policy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Policy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Policy

fn eq(&self, other: &Policy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Policy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Policy