Struct cedar_policy_core::ast::StaticPolicy

pub struct StaticPolicy(_);

Static Policies are policy that do not come from templates. They have the same structure as a template definition, but cannot contain slots

Implementations

impl StaticPolicy

pub fn id(&self) -> &PolicyID

Get the Id of this policy.

pub fn new_id(&mut self, id: PolicyID) -> Self

Clone this policy with a new Id.

pub fn effect(&self) -> Effect

Get the Effect of this policy.

pub fn annotation(&self, key: &Id) -> Option<&SmolStr>

Get data from an annotation.

pub fn annotations(&self) -> impl Iterator<Item = (&Id, &SmolStr)>

Get all annotation data.

pub fn principal_constraint(&self) -> &PrincipalConstraint

Get the principal head constraint of this policy.

pub fn principal_constraint_expr(&self) -> Expr

Get the principal head constraint as an expression. This will be a boolean-valued expression: either true (if the policy just has principal,), or an equality or hierarchy constraint

pub fn action_constraint(&self) -> &ActionConstraint

Get the action head constraint of this policy.

pub fn action_constraint_expr(&self) -> Expr

Get the action head constraint of this policy as an expression. This will be a boolean-valued expression: either true (if the policy just has action,), or an equality or hierarchy constraint

pub fn resource_constraint(&self) -> &ResourceConstraint

Get the resource head constraint of this policy.

pub fn resource_constraint_expr(&self) -> Expr

Get the resource head constraint of this policy as an expression. This will be a boolean-valued expression: either true (if the policy just has resource,), or an equality or hierarchy constraint

pub fn non_head_constraints(&self) -> &Expr

Get the non-head constraints of this policy.

This will be a conjunction of the policy’s when conditions and the negation of each of the policy’s unless conditions.

pub fn condition(&self) -> Expr

Get the condition expression of this policy.

This will be a conjunction of the policy’s head constraints (on principal, resource, and action); the policy’s “when” conditions; and the negation of each of the policy’s “unless” conditions.

pub fn new( id: PolicyID, annotations: BTreeMap<Id, SmolStr>, effect: Effect, principal_constraint: PrincipalConstraint, action_constraint: ActionConstraint, resource_constraint: ResourceConstraint, non_head_constraints: Expr ) -> Result<Self, ContainsSlot>

Construct a Policy from its components

Trait Implementations

impl Clone for StaticPolicy

fn clone(&self) -> StaticPolicy

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StaticPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for StaticPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for StaticPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<StaticPolicy> for Arc<Template>

fn from(p: StaticPolicy) -> Self

Converts to this type from the input type.

impl From<StaticPolicy> for Policy

fn from(inline: StaticPolicy) -> Policy

Converts to this type from the input type.

impl From<StaticPolicy> for TemplateBody

fn from(p: StaticPolicy) -> Self

Converts to this type from the input type.

impl Hash for StaticPolicy

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq<StaticPolicy> for StaticPolicy

fn eq(&self, other: &StaticPolicy) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for StaticPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>where __S: Serializer,

Serialize this value into the given Serde serializer.

impl TryFrom<Template> for StaticPolicy

type Error = ContainsSlot

The type returned in the event of a conversion error.

fn try_from(value: Template) -> Result<Self, Self::Error>

Performs the conversion.

impl Eq for StaticPolicy

impl StructuralEq for StaticPolicy

impl StructuralPartialEq for StaticPolicy