Struct cedar_policy_core::ast::Policy

pub struct Policy { /* private fields */ }

A Policy that contains: a pointer to its template an link ID (unless it’s an static policy) the bound values for slots in the template

Policies are not serializable (due to the pointer), and can be serialized by converting to/from LiteralPolicy

Implementations

impl Policy

pub fn from_when_clause(effect: Effect, when: Expr, id: PolicyID) -> Self

Build a policy with a given effect, given when clause, and unconstrained head variables

pub fn template(&self) -> &Template

Get pointer to the template for this policy

pub fn effect(&self) -> Effect

Get the effect (forbid or permit) of this policy.

pub fn annotation(&self, key: &Id) -> Option<&SmolStr>

Get data from an annotation.

pub fn annotations(&self) -> impl Iterator<Item = (&Id, &SmolStr)>

Get all annotation data.

pub fn principal_constraint(&self) -> PrincipalConstraint

Get the principal constraint for this policy.

By the invariant, this principal constraint will not contain (unresolved) slots, so you will not get EntityReference::Slot anywhere in it.

pub fn action_constraint(&self) -> &ActionConstraint

Get the action constraint for this policy.

pub fn resource_constraint(&self) -> ResourceConstraint

Get the resource constraint for this policy.

By the invariant, this resource constraint will not contain (unresolved) slots, so you will not get EntityReference::Slot anywhere in it.

pub fn non_head_constraints(&self) -> &Expr

Get the non-head constraints for the policy

pub fn condition(&self) -> Expr

Get the expression that represents this policy.

pub fn env(&self) -> &SlotEnv

Get the mapping from SlotIds to EntityUIDs for this policy. (This will be empty for inline policies.)

pub fn id(&self) -> &PolicyID

Get the ID of this policy.

pub fn new_id(&self, id: PolicyID) -> Self

Clone this policy or instance with a new ID

pub fn is_static(&self) -> bool

Returns true if this policy is an inline policy

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> From<&'a Policy> for BorrowedLiteralPolicy<'a>

fn from(p: &'a Policy) -> Self

Converts to this type from the input type.

impl From<Policy> for LiteralPolicy

fn from(p: Policy) -> Self

Converts to this type from the input type.

impl From<Policy> for Policy

Convert AST to EST

fn from(ast: Policy) -> Policy

Converts to this type from the input type.

impl From<StaticPolicy> for Policy

fn from(inline: StaticPolicy) -> Policy

Converts to this type from the input type.

impl PartialEq<Policy> for Policy

fn eq(&self, other: &Policy) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for Policy

impl StructuralEq for Policy

impl StructuralPartialEq for Policy