Expand description
Access control plugin SPI (OMG DDS-Security 1.1 §8.4).
Decides per topic / per operation whether an authenticated participant may perform the action. Inputs:
- Governance XML — topic-level rules (discovery, publishing, subscribing, encrypt flag).
- Permissions XML — who may do what (signed with the permissions CA).
The XML files are passed as properties (paths). The plugin parses + validates + caches internally.
zerodds-lint: allow no_dyn_in_safe
(The plugin SPI needs Box<dyn AccessControlPlugin>.)
Structs§
- Permissions
Handle - Opaque handle for validated permissions. Created by
AccessControlPlugin::validate_local_permissionsorvalidate_remote_permissions.
Enums§
- Access
Decision - Whether an action may be performed. Deliberately sparse — no
reason string, because the reason must not reveal anything to the
remote (logging via
crate::LoggingPlugin).
Traits§
- Access
Control Plugin - Access control plugin trait (spec §8.4.2.9).
Type Aliases§
- Access
Control Box - Factory alias.