Struct MockAccessControlPlugin 

pub struct MockAccessControlPlugin { /* private fields */ }

Mock-Access-Control: erlaubt alles. Nur fuer Tests.

Implementations

impl MockAccessControlPlugin

pub fn new() -> Self

Konstruktor.

Trait Implementations

impl AccessControlPlugin for MockAccessControlPlugin

fn validate_local_permissions( &mut self, _local: IdentityHandle, _participant_guid: [u8; 16], _props: &PropertyList, ) -> SecurityResult<PermissionsHandle>

Validiert lokale Permissions (Governance.xml + Permissions.xml

fn validate_remote_permissions( &mut self, _local: IdentityHandle, _remote: IdentityHandle, _remote_permissions_token: &[u8], _remote_credential: &[u8], ) -> SecurityResult<PermissionsHandle>

Validiert Remote-Permissions aus dem SEDP-Handshake.

fn check_create_datawriter( &self, _p: PermissionsHandle, _topic: &str, ) -> SecurityResult<AccessDecision>

Darf dieser Participant einen DataWriter auf diesem Topic erzeugen?

fn check_create_datareader( &self, _p: PermissionsHandle, _topic: &str, ) -> SecurityResult<AccessDecision>

Darf dieser Participant einen DataReader auf diesem Topic erzeugen?

fn check_remote_datawriter_match( &self, _l: PermissionsHandle, _r: PermissionsHandle, _topic: &str, ) -> SecurityResult<AccessDecision>

Darf der lokale Reader die Publication des Remote matchen?

fn check_remote_datareader_match( &self, _l: PermissionsHandle, _r: PermissionsHandle, _topic: &str, ) -> SecurityResult<AccessDecision>

Spiegelbildlich: darf Remote-Reader unseren Writer matchen?

fn plugin_class_id(&self) -> &str

Plugin-Class-Id (z.B. “DDS:Access:Permissions:1.2”) fuer SPDP- Annoncierung.

fn check_create_participant( &self, _local_perms: PermissionsHandle, _domain_id: u32, ) -> SecurityResult<AccessDecision>

Spec §9.4.2.5: check_create_participant. Default: permit (kein Plugin-spezifisches Filtern).

fn check_remote_participant( &self, _local_perms: PermissionsHandle, _remote_perms: PermissionsHandle, _domain_id: u32, ) -> SecurityResult<AccessDecision>

Spec §9.4.2.6: check_remote_participant — darf Remote- Participant in unsere Domain joinen? Default: permit.

fn check_create_topic( &self, _local_perms: PermissionsHandle, _topic_name: &str, ) -> SecurityResult<AccessDecision>

Spec §9.4.2.10: check_create_topic — darf der lokale Subject ein Topic mit dem Namen erzeugen? Default: permit.

fn get_permissions_token( &self, _local_perms: PermissionsHandle, ) -> SecurityResult<Vec<u8>>

Spec §9.4.2.13: get_permissions_token — opaker Permissions-Token fuer SPDP-Annoncierung (PID_PERMISSIONS_TOKEN 0x1002). Default: leer.

fn get_permissions_credential_token( &self, _local_perms: PermissionsHandle, ) -> SecurityResult<Vec<u8>>

Spec §9.4.2.14: get_permissions_credential_token — opake Credential, die im Authentication-Plugin via set_permissions_credential_and_token weitergereicht wird. Default: leer.

impl Debug for MockAccessControlPlugin

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for MockAccessControlPlugin

fn default() -> MockAccessControlPlugin

Returns the “default value” for a type.