Struct PolicyEvaluator 

pub struct PolicyEvaluator {
    policy: RbacPolicy,
    cache: RwLock<RawRwLock, HashMap<(String, String), bool>>,
    cache_ttl: Duration,
}

RBAC policy evaluator.

Fields

policy: RbacPolicy

cache: RwLock<RawRwLock, HashMap<(String, String), bool>>

cache_ttl: Duration

Implementations

impl PolicyEvaluator

pub fn new(policy: RbacPolicy) -> PolicyEvaluator

Create a new policy evaluator.

pub fn with_cache_ttl(self, ttl: Duration) -> PolicyEvaluator

Set cache TTL.

pub fn clear_cache(&self)

Clear the evaluation cache.

pub fn is_allowed(&self, subject: &Subject, permission: Permission) -> bool

Check if subject has a permission.

pub fn can_access( &self, subject: &Subject, resource: &str, permission: Permission, ) -> Result<(), RbacError>

Check if subject can access a resource.

pub fn can_access_kernel( &self, subject: &Subject, kernel_id: &KernelId, permission: Permission, ) -> Result<(), RbacError>

Check kernel access.

pub fn get_permissions(&self, subject: &Subject) -> HashSet<Permission>

Get all permissions for a subject.