cedar_policy_core

Module authorizer

Source
Expand description

This module contains the Cedar “authorizer”, which implements the actual authorization logic.

Together with the parser, evaluator, and other components, this comprises the “authorization engine”.

Structs§

  • Authorizer
  • Diagnostics providing more information on how a Decision was reached
  • Policy evaluation response returned from the Authorizer.
  • A partially evaluated authorization response. Splits the results into several categories: satisfied, false, and residual for each policy effect. Also tracks all the errors that were encountered during evaluation. This structure currently has to own all of the PolicyID objects due to the Self::reauthorize method. If PolicySet could borrow its PolicyID/contents then this whole structured could be borrowed.
  • Authorization response returned from the Authorizer

Enums§