Enum PermissionScope 

pub enum PermissionScope {
    All,
    Bifrost(BifrostPermissionScope),
    Gateway(GatewayAccess),
    Verifier(CardUid),
    Tool(BuiltinTool),
}

Objects one permission grant reaches.

Domain-tagged rather than a shared string object language: a future Wyrd domain that needs object scope adds its own typed variant instead of overloading someone else’s identity spelling.

Variants

All

Every object of the covered resource and action.

Bifrost(BifrostPermissionScope)

One Bifrost schema or table.

Gateway(GatewayAccess)

One gateway deployment or exact deployment/model pair.

Verifier(CardUid)

One Verifier Card, by its exact UID.

Tool(BuiltinTool)

One exact built-in Agent tool, never a prefix or path.

Implementations

impl PermissionScope

pub fn covers(&self, required: &PermissionScope) -> bool

True when this scope’s objects include every object required names.

Self::All covers everything; a Bifrost scope never covers All, because “all objects” is strictly wider than any single schema or table. A Verifier or tool scope covers only the same Verifier UID or tool.

pub const fn is_bifrost(&self) -> bool

True when this scope names a Bifrost object rather than every object.

pub const fn is_gateway(&self) -> bool

True when this scope names a gateway deployment or model.

pub fn validate(&self) -> Result<(), PermissionScopeError>

Rejects a scope whose object identity is malformed.

Errors

Returns PermissionScopeError::InvalidIdentifier when a catalog or schema segment is empty, longer than 63 characters, or contains anything other than ASCII alphanumerics, _, or -. Gateway identities are validated when their typed ids decode, so a gateway, Verifier, or tool scope is always valid.

Trait Implementations

impl Clone for PermissionScope

fn clone(&self) -> PermissionScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PermissionScope

fn deserialize<__D>( __deserializer: __D, ) -> Result<PermissionScope, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PermissionScope

impl Hash for PermissionScope

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl JsonSchema for PermissionScope

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for PermissionScope

fn eq(&self, other: &PermissionScope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PermissionScope

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PermissionScope