Trait kanidmd_lib::server::access::AccessControlsTransaction

pub trait AccessControlsTransaction<'a> {
    fn get_search(&self) -> &Vec<AccessControlSearch> ;
    fn get_create(&self) -> &Vec<AccessControlCreate> ;
    fn get_modify(&self) -> &Vec<AccessControlModify> ;
    fn get_delete(&self) -> &Vec<AccessControlDelete> ;
    fn get_acp_resolve_filter_cache(
        &self
    ) -> &mut ARCacheReadTxn<'a, (IdentityId, Filter<FilterValid>), Filter<FilterValidResolved>, ()>;

    fn search_related_acp<'b>(
        &'b self,
        ident: &Identity
    ) -> Vec<(&'b AccessControlSearch, Filter<FilterValidResolved>)>  { ... }
    fn search_filter_entries(
        &self,
        se: &SearchEvent,
        entries: Vec<Arc<EntrySealedCommitted>>
    ) -> Result<Vec<Arc<EntrySealedCommitted>>, OperationError> { ... }
    fn search_filter_entry_attributes(
        &self,
        se: &SearchEvent,
        entries: Vec<Arc<EntrySealedCommitted>>
    ) -> Result<Vec<Entry<EntryReduced, EntryCommitted>>, OperationError> { ... }
    fn modify_related_acp<'b>(
        &'b self,
        ident: &Identity
    ) -> Vec<(&'b AccessControlModify, Filter<FilterValidResolved>)>  { ... }
    fn modify_allow_operation(
        &self,
        me: &ModifyEvent,
        entries: &[Arc<EntrySealedCommitted>]
    ) -> Result<bool, OperationError> { ... }
    fn batch_modify_allow_operation(
        &self,
        me: &BatchModifyEvent,
        entries: &[Arc<EntrySealedCommitted>]
    ) -> Result<bool, OperationError> { ... }
    fn create_allow_operation(
        &self,
        ce: &CreateEvent,
        entries: &[Entry<EntryInit, EntryNew>]
    ) -> Result<bool, OperationError> { ... }
    fn delete_related_acp<'b>(
        &'b self,
        ident: &Identity
    ) -> Vec<(&'b AccessControlDelete, Filter<FilterValidResolved>)>  { ... }
    fn delete_allow_operation(
        &self,
        de: &DeleteEvent,
        entries: &[Arc<EntrySealedCommitted>]
    ) -> Result<bool, OperationError> { ... }
    fn effective_permission_check(
        &self,
        ident: &Identity,
        attrs: Option<BTreeSet<AttrString>>,
        entries: &[Arc<EntrySealedCommitted>]
    ) -> Result<Vec<AccessEffectivePermission>, OperationError> { ... }
}

Required Methods

fn get_search(&self) -> &Vec<AccessControlSearch>

fn get_create(&self) -> &Vec<AccessControlCreate>

fn get_modify(&self) -> &Vec<AccessControlModify>

fn get_delete(&self) -> &Vec<AccessControlDelete>

fn get_acp_resolve_filter_cache(
    &self
) -> &mut ARCacheReadTxn<'a, (IdentityId, Filter<FilterValid>), Filter<FilterValidResolved>, ()>

Provided Methods

fn search_related_acp<'b>(
    &'b self,
    ident: &Identity
) -> Vec<(&'b AccessControlSearch, Filter<FilterValidResolved>)>

fn search_filter_entries(
    &self,
    se: &SearchEvent,
    entries: Vec<Arc<EntrySealedCommitted>>
) -> Result<Vec<Arc<EntrySealedCommitted>>, OperationError>

fn search_filter_entry_attributes(
    &self,
    se: &SearchEvent,
    entries: Vec<Arc<EntrySealedCommitted>>
) -> Result<Vec<Entry<EntryReduced, EntryCommitted>>, OperationError>

fn modify_related_acp<'b>(
    &'b self,
    ident: &Identity
) -> Vec<(&'b AccessControlModify, Filter<FilterValidResolved>)>

fn modify_allow_operation(
    &self,
    me: &ModifyEvent,
    entries: &[Arc<EntrySealedCommitted>]
) -> Result<bool, OperationError>

fn batch_modify_allow_operation(
    &self,
    me: &BatchModifyEvent,
    entries: &[Arc<EntrySealedCommitted>]
) -> Result<bool, OperationError>

fn create_allow_operation(
    &self,
    ce: &CreateEvent,
    entries: &[Entry<EntryInit, EntryNew>]
) -> Result<bool, OperationError>

fn delete_related_acp<'b>(
    &'b self,
    ident: &Identity
) -> Vec<(&'b AccessControlDelete, Filter<FilterValidResolved>)>

fn delete_allow_operation(
    &self,
    de: &DeleteEvent,
    entries: &[Arc<EntrySealedCommitted>]
) -> Result<bool, OperationError>

fn effective_permission_check(
    &self,
    ident: &Identity,
    attrs: Option<BTreeSet<AttrString>>,
    entries: &[Arc<EntrySealedCommitted>]
) -> Result<Vec<AccessEffectivePermission>, OperationError>

Implementors

impl<'a> AccessControlsTransaction<'a> for AccessControlsReadTransaction<'a>

impl<'a> AccessControlsTransaction<'a> for AccessControlsWriteTransaction<'a>