Struct RbacAdapter 

pub struct RbacAdapter {
    pub subject_roles: HashMap<String, HashSet<String>>,
    pub role_permissions: HashMap<String, HashSet<(String, String)>>,
}

Available on crate feature enterprise only.

RBAC adapter with explicit subject role mapping.

Examples

use http_handle::enterprise::RbacAdapter;
let r = RbacAdapter::default();
assert!(r.subject_roles.is_empty());

Panics

This type does not panic.

Fields

subject_roles: HashMap<String, HashSet<String>>

Subject -> role set map.

role_permissions: HashMap<String, HashSet<(String, String)>>

Role -> allowed (resource, action) tuples.

Implementations

impl RbacAdapter

pub fn grant_role( self, subject: impl Into<String>, role: impl Into<String>, ) -> Self

Grants a role to a subject.

Examples

use http_handle::enterprise::RbacAdapter;
let r = RbacAdapter::default().grant_role("alice", "admin");
assert!(!r.subject_roles.is_empty());

Panics

This function does not panic.

pub fn grant_permission( self, role: impl Into<String>, resource: impl Into<String>, action: impl Into<String>, ) -> Self

Grants a permission tuple to a role.

Examples

use http_handle::enterprise::RbacAdapter;
let r = RbacAdapter::default().grant_permission("admin", "docs", "read");
assert!(!r.role_permissions.is_empty());

Panics

This function does not panic.

Trait Implementations

impl AuthorizationEngine for RbacAdapter

fn evaluate(&self, context: &AuthorizationContext) -> AuthorizationDecision

Evaluates access for a given request context.

impl Clone for RbacAdapter

fn clone(&self) -> RbacAdapter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RbacAdapter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RbacAdapter

fn default() -> RbacAdapter

Returns the “default value” for a type.

impl PartialEq for RbacAdapter

fn eq(&self, other: &RbacAdapter) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for RbacAdapter

impl StructuralPartialEq for RbacAdapter