Struct PlatformPrincipal 

pub struct PlatformPrincipal {
    pub id: PrincipalId,
    pub kind: PrincipalKindTag,
    pub effective_permissions: PermissionSet,
    pub credential_id: Option<Uuid>,
}

Platform-scope authenticated identity.

Deliberately carries no tenant. A platform principal operates the tenant directory — creating, inspecting, suspending, and recovering administration for tenants — and is never implicitly authorized over the resources inside one. Because the type has no tenant to offer, a handler holding one cannot open a tenant-scoped connection at all; the control-plane boundary is enforced by what is representable rather than by a check a caller could forget.

Fields

id: PrincipalId

Stable principal id.

kind: PrincipalKindTag

The kind the platform directory stores for this principal.

GlobalAdmin for a machine root, User for a human registered for federated sign-in. Audit reads it, so a human’s decision is never recorded as a machine’s. It is read from the store at session verification, never inferred from what the principal may do.

effective_permissions: PermissionSet

Permissions resolved from the principal’s platform grant.

Absence of a grant is denial: a platform principal with an empty set authenticates but authorizes nothing.

credential_id: Option<Uuid>

Non-secret id of the credential the session was minted from, when one was presented. None for a federated login.

Implementations

impl PlatformPrincipal

pub const fn new( id: PrincipalId, kind: PrincipalKindTag, effective_permissions: PermissionSet, ) -> Self

Construct a platform-scope principal.

pub const fn with_credential_id(self, credential_id: Option<Uuid>) -> Self

Name the credential this session was minted from.

Trait Implementations

impl Clone for PlatformPrincipal

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PlatformPrincipal

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PlatformPrincipal

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PlatformPrincipal

impl From<PlatformPrincipal> for AuthContext

fn from(principal: PlatformPrincipal) -> Self

Lift a verified platform principal into the shared context.

The platform arm is the one that carries no tenant, which is what downstream tenancy checks read the context for.

impl PartialEq for PlatformPrincipal

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PlatformPrincipal

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PlatformPrincipal