Struct Subject 

pub struct Subject {
    pub id: String,
    pub roles: HashSet<String>,
    pub permissions: HashSet<String>,
    pub tenant_id: Option<String>,
}

Subject for RBAC evaluation (who is making the request).

Fields

id: String

Subject ID (user ID, service account, etc.).

roles: HashSet<String>

Assigned roles.

permissions: HashSet<String>

Direct permissions (in addition to role permissions).

tenant_id: Option<String>

Tenant ID (for multi-tenant isolation).

Implementations

impl Subject

pub fn new(id: impl Into<String>) -> Subject

Create a new subject.

pub fn with_role(self, role: impl Into<String>) -> Subject

Add a role.

pub fn with_roles<I, S>(self, roles: I) -> Subject

where I: IntoIterator<Item = S>, S: Into<String>,

Add roles.

pub fn with_permission(self, permission: impl Into<String>) -> Subject

Add a direct permission.

pub fn with_tenant(self, tenant_id: impl Into<String>) -> Subject

Set tenant ID.

pub fn from_auth_context(ctx: &AuthContext) -> Subject

Create from auth context.

Trait Implementations

impl Clone for Subject

fn clone(&self) -> Subject

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Subject

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.