Enum Access 

pub enum Access {
    None,
    User(Arc<User>),
}

Authorization decision attached to a request Context.

Closed enum (no dyn): the dispatch layer reads ctx.access.can_read_table(db, t) and the compiler devirtualizes to a stack-resident match. Customer authentication plugins extend via AuthProvider — they produce an AuthIdentity which the framework resolves into a User; they do not implement Access directly.

Variants

None

Unauthenticated request. Every permission check returns false; the only way through is a resource that explicitly opts into public access (e.g. via @access(public: [read])).

User(Arc<User>)

Authenticated user — RBAC decisions delegate to the inner User. Wrapped in Arc so cloning Access across the request pipeline is one atomic bump, not a deep Role copy.

Implementations

impl Access

pub const fn is_authenticated(&self) -> bool

true if the request authenticated as a user (any user).

pub fn is_super_user(&self) -> bool

true if the request authenticated as a super-user role.

pub fn role(&self) -> &str

Role identifier of the authenticated user, or empty string if unauthenticated.

pub fn username(&self) -> &str

Username of the authenticated user, or empty string if unauthenticated.

pub fn user(&self) -> Option<&User>

Some(user) if authenticated, None otherwise. Useful when the caller needs to reach into User-specific fields beyond the helper methods on Access.

pub fn can_read_table(&self, database: &str, table: &str) -> bool

May the requester read records from database.table?

pub fn can_insert_table(&self, database: &str, table: &str) -> bool

May the requester insert records into database.table?

pub fn can_update_table(&self, database: &str, table: &str) -> bool

May the requester update records in database.table?

pub fn can_delete_table(&self, database: &str, table: &str) -> bool

May the requester delete records from database.table?

pub fn can_read_attribute( &self, database: &str, table: &str, attr: &str, ) -> bool

May the requester read field attr on database.table?

pub fn can_write_attribute( &self, database: &str, table: &str, attr: &str, ) -> bool

May the requester write field attr on database.table?

pub fn has_unrestricted_attributes(&self, database: &str, table: &str) -> bool

true if no per-attribute restrictions apply for database.table. Access::None returns true here because there is no user whose attribute grants need consulting — callers gate on is_authenticated separately if they need to distinguish “no user” from “user with full attributes”.

pub fn filter_readable_attributes<'a>( &self, database: &str, table: &str, attrs: &[&'a str], ) -> Vec<&'a str>

Filter attrs to only those the requester may read on database.table. Super-users keep the full list; unauthenticated requests get an empty list.

pub fn validate_writable_attributes( &self, database: &str, table: &str, attrs: &[&str], ) -> Result<(), Vec<String>>

Verify every attribute in attrs is writable. Super-users always succeed; unauthenticated requests fail listing every attribute as unauthorized.

Errors

Returns Err(unauthorized) with the list of attribute names the requester may not write.

pub fn filter_record(&self, database: &str, table: &str, record: &mut Value)

Filter a JSON object in-place, retaining only attributes the requester may read. Super-users pass-through. Unauthenticated requests reduce the object to empty.

pub fn filter_records(&self, database: &str, table: &str, records: &mut [Value])

Filter every record in records via filter_record.

Trait Implementations

impl Clone for Access

fn clone(&self) -> Access

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Access

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Access

fn default() -> Access

Returns the “default value” for a type.