Trait kanidmd_lib::server::access::AccessControlsTransaction

pub trait AccessControlsTransaction<'a> {
    // Required methods
    fn get_search(&self) -> &Vec<AccessControlSearch> ;
    fn get_create(&self) -> &Vec<AccessControlCreate> ;
    fn get_modify(&self) -> &Vec<AccessControlModify> ;
    fn get_delete(&self) -> &Vec<AccessControlDelete> ;
    fn get_acp_resolve_filter_cache(
        &self
    ) -> &mut ARCacheReadTxn<'a, (IdentityId, Filter<FilterValid>), Filter<FilterValidResolved>, ()>;

    // Provided methods
    fn search_related_acp<'b>(
        &'b self,
        ident: &Identity
    ) -> Vec<(&'b AccessControlSearch, Filter<FilterValidResolved>)>  { ... }
    fn search_filter_entries(
        &self,
        se: &SearchEvent,
        entries: Vec<Arc<EntrySealedCommitted>>
    ) -> Result<Vec<Arc<EntrySealedCommitted>>, OperationError> { ... }
    fn search_filter_entry_attributes(
        &self,
        se: &SearchEvent,
        entries: Vec<Arc<EntrySealedCommitted>>
    ) -> Result<Vec<Entry<EntryReduced, EntryCommitted>>, OperationError> { ... }
    fn modify_related_acp<'b>(
        &'b self,
        ident: &Identity
    ) -> Vec<(&'b AccessControlModify, Filter<FilterValidResolved>)>  { ... }
    fn modify_allow_operation(
        &self,
        me: &ModifyEvent,
        entries: &[Arc<EntrySealedCommitted>]
    ) -> Result<bool, OperationError> { ... }
    fn batch_modify_allow_operation(
        &self,
        me: &BatchModifyEvent,
        entries: &[Arc<EntrySealedCommitted>]
    ) -> Result<bool, OperationError> { ... }
    fn create_allow_operation(
        &self,
        ce: &CreateEvent,
        entries: &[Entry<EntryInit, EntryNew>]
    ) -> Result<bool, OperationError> { ... }
    fn delete_related_acp<'b>(
        &'b self,
        ident: &Identity
    ) -> Vec<(&'b AccessControlDelete, Filter<FilterValidResolved>)>  { ... }
    fn delete_allow_operation(
        &self,
        de: &DeleteEvent,
        entries: &[Arc<EntrySealedCommitted>]
    ) -> Result<bool, OperationError> { ... }
    fn effective_permission_check(
        &self,
        ident: &Identity,
        attrs: Option<BTreeSet<AttrString>>,
        entries: &[Arc<EntrySealedCommitted>]
    ) -> Result<Vec<AccessEffectivePermission>, OperationError> { ... }
}

Required Methods

fn get_search(&self) -> &Vec<AccessControlSearch>

fn get_create(&self) -> &Vec<AccessControlCreate>

fn get_modify(&self) -> &Vec<AccessControlModify>

fn get_delete(&self) -> &Vec<AccessControlDelete>

fn get_acp_resolve_filter_cache( &self ) -> &mut ARCacheReadTxn<'a, (IdentityId, Filter<FilterValid>), Filter<FilterValidResolved>, ()>

Provided Methods

fn search_related_acp<'b>( &'b self, ident: &Identity ) -> Vec<(&'b AccessControlSearch, Filter<FilterValidResolved>)>

fn search_filter_entries( &self, se: &SearchEvent, entries: Vec<Arc<EntrySealedCommitted>> ) -> Result<Vec<Arc<EntrySealedCommitted>>, OperationError>

fn search_filter_entry_attributes( &self, se: &SearchEvent, entries: Vec<Arc<EntrySealedCommitted>> ) -> Result<Vec<Entry<EntryReduced, EntryCommitted>>, OperationError>

fn modify_related_acp<'b>( &'b self, ident: &Identity ) -> Vec<(&'b AccessControlModify, Filter<FilterValidResolved>)>

fn modify_allow_operation( &self, me: &ModifyEvent, entries: &[Arc<EntrySealedCommitted>] ) -> Result<bool, OperationError>

fn batch_modify_allow_operation( &self, me: &BatchModifyEvent, entries: &[Arc<EntrySealedCommitted>] ) -> Result<bool, OperationError>

fn create_allow_operation( &self, ce: &CreateEvent, entries: &[Entry<EntryInit, EntryNew>] ) -> Result<bool, OperationError>

fn delete_related_acp<'b>( &'b self, ident: &Identity ) -> Vec<(&'b AccessControlDelete, Filter<FilterValidResolved>)>

fn delete_allow_operation( &self, de: &DeleteEvent, entries: &[Arc<EntrySealedCommitted>] ) -> Result<bool, OperationError>

fn effective_permission_check( &self, ident: &Identity, attrs: Option<BTreeSet<AttrString>>, entries: &[Arc<EntrySealedCommitted>] ) -> Result<Vec<AccessEffectivePermission>, OperationError>

Implementors

impl<'a> AccessControlsTransaction<'a> for AccessControlsReadTransaction<'a>

impl<'a> AccessControlsTransaction<'a> for AccessControlsWriteTransaction<'a>