Expand description
This module contains the Cedar “authorizer”, which implements the actual authorization logic.
Together with the parser, evaluator, and other components, this comprises the “authorization engine”.
Structs§
- Authorizer
- Diagnostics providing more information on how a
Decision
was reached - Policy evaluation response returned from the
Authorizer
. - A partially evaluated authorization response. Splits the results into several categories: satisfied, false, and residual for each policy effect. Also tracks all the errors that were encountered during evaluation. This structure currently has to own all of the
PolicyID
objects due to theSelf::reauthorize
method. IfPolicySet
could borrow its PolicyID/contents then this whole structured could be borrowed. - Authorization response returned from the
Authorizer
Enums§
- Errors that can occur during authorization
- Errors that occur during concretizing a partial request
- Decision returned from the
Authorizer
- Enum representing whether a policy is not satisfied due to evaluating to
false
, or because it errored. - Errors that occur during reauthorizing partial responses