Enum Applicability 

pub enum Applicability {
    Write {
        kinds: KindSet,
        collections: Scope<String>,
        actions: ActionSet,
        path_prefixes: Scope<String>,
    },
    Blob,
    Grant {
        client_ids: Scope<String>,
    },
    Token {
        client_ids: Scope<String>,
    },
    Create,
}

The core’s own types, re-exported: every field of record::ParsedPolicy is one of these, so a caller that declares a policy reaches them through this crate rather than depending on didbot-policy for the names alone. What a policy statically applies to — the data the tree indexes on.

One variant per subject shape, matching Subject. This is used twice per policy: once as its decision surface (what evaluate may ask it about) and once, independently, as its observation surface (what Evaluator::observe is told about) — see PolicyDeclaration.

Variants

Write

Applies to writes.

Fields

kinds: KindSet

Which account kinds. A policy that only makes sense for agents declares that here, and a host’s or a service’s write never reaches its evaluator. See KindSet.

collections: Scope<String>

Which collections (NSIDs). Any for a policy that is not collection-specific — an application denial, for instance.

actions: ActionSet

Which actions. A policy declaring only WriteAction::Delete never sees a create or update, and vice versa.

path_prefixes: Scope<String>

Which changed-path prefixes, matched by splitting on . — this crate’s own routing convention, kept separate from whatever segmentation meaning an evaluator’s engine gives Change::path itself; see that field’s doc comment. Any matches the write regardless of its diff, including one with no changed paths at all.

Blob

Applies to blob uploads.

Grant

Applies to pushed authorization requests.

Fields

client_ids: Scope<String>

Which applications, by client id. Any for a policy that applies to every requester.

Token

Applies to tokens about to be issued: a code exchanged, a refresh rotated.

Fields

client_ids: Scope<String>

Which applications, by client id. Any for a policy that applies to every client.

Create

Applies to where a new account lands.

Trait Implementations

impl Clone for Applicability

fn clone(&self) -> Applicability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Applicability

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl PartialEq for Applicability

fn eq(&self, other: &Applicability) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for Applicability

impl StructuralPartialEq for Applicability