Skip to main content

Module access_control

Module access_control 

Source
Expand description

Access control plugin SPI (OMG DDS-Security 1.1 §8.4).

Decides per topic / per operation whether an authenticated participant may perform the action. Inputs:

  • Governance XML — topic-level rules (discovery, publishing, subscribing, encrypt flag).
  • Permissions XML — who may do what (signed with the permissions CA).

The XML files are passed as properties (paths). The plugin parses + validates + caches internally.

zerodds-lint: allow no_dyn_in_safe (The plugin SPI needs Box<dyn AccessControlPlugin>.)

Structs§

PermissionsHandle
Opaque handle for validated permissions. Created by AccessControlPlugin::validate_local_permissions or validate_remote_permissions.

Enums§

AccessDecision
Whether an action may be performed. Deliberately sparse — no reason string, because the reason must not reveal anything to the remote (logging via crate::LoggingPlugin).

Traits§

AccessControlPlugin
Access control plugin trait (spec §8.4.2.9).

Type Aliases§

AccessControlBox
Factory alias.