Struct PermissionManager 

pub struct PermissionManager { /* private fields */ }

Implementations

impl PermissionManager

pub fn new(user: &User, scope: CredentialScope) -> Self

pub fn for_impersonation(self) -> Self

pub fn for_server(&self, server: &Server) -> Self

Resolves the grants the user has on a specific server, replacing those of any server this manager was previously scoped to.

pub fn user_uuid(&self) -> Uuid

pub fn scope(&self) -> &CredentialScope

pub fn has_user_permission(&self, permission: &str) -> Result<(), ApiResponse>

User permissions cover self-service on one’s own account, which every account holds unconditionally, so the credential scope is the only thing that can withhold them.

pub fn has_admin_permission(&self, permission: &str) -> Result<(), ApiResponse>

pub fn can_grant( &self, admin: &[CompactString], server: &[CompactString], ) -> bool

Whether this credential holds every given permission itself, so handing them to someone else (through a role, an oauth mapping or an account link) cannot escalate.

pub fn deny_while_impersonating(&self) -> Result<(), ApiResponse>

Credentials and settings changed while impersonating would outlive the impersonation and act outside its audit trail, so only the account itself may change them.

pub fn can_impersonate(&self, user: &User) -> bool

Administrators may only be impersonated by an administrator signed in with a session; anyone else may only be impersonated by a caller who could grant their whole role.

pub fn is_unrestricted_admin(&self) -> bool

Actions that could turn the caller into a full administrator (granting admin status, writing to or impersonating administrators, linking identities, changing how an oauth provider identifies users) need an administrator signed in with a session, because an api key scoped to a single admin permission would otherwise be enough.

pub fn can_modify_user(&self, user: &User) -> Result<(), ApiResponse>

Administrators may only be written to by other administrators signed in with a session, no matter which admin permissions a role or api key grants.

pub fn has_server_permission(&self, permission: &str) -> Result<(), ApiResponse>

pub fn missing_server_permission<T: AsRef<str>>( &self, permissions: impl IntoIterator<Item = T>, ) -> Option<T>

Trait Implementations

impl Clone for PermissionManager

fn clone(&self) -> PermissionManager

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.