Struct AudienceMintPolicy 

pub struct AudienceMintPolicy { /* private fields */ }

The shipped MintPolicy. Every caller, admin included, may mint only an audience in their mint set – grants[a].mint, never grants[a].read (a read grant confers no mint authority, unchanged from AudienceReadPolicy’s split); being able to read public via its seeded read grant does not imply being able to mint into it – that requires its own grant naming public in a "mint" list (in production, the seeded ('public', 'mint', '*') row, schema v9).

A route’s authorization is the authority that route’s own effect requires: minting yields write access to an audience, so it requires a grant on that audience – is_admin confers none. mint_key (analytics-web-srv/src/ingestion_keys.rs) delegates authorization to this policy for every caller, with no admin-specific arm of its own accord (its own gate, MintGate, only enforces the self-service knob against non-admins).

Implementations

impl AudienceMintPolicy

pub fn new(grants: AudienceGrants) -> AudienceMintPolicy

Builds a policy with an explicit static grant map.

pub fn with_store( self, store: Arc<SnapshotSource<AudienceGrantsLoader>>, ) -> AudienceMintPolicy

Attaches the DB-backed grant store. Built alongside AudienceReadPolicy::with_store for symmetry – unlike the read side, no production call site attaches a store through this method: mint_key constructs its AudienceMintPolicy via new, so mint grants stay resolved by a fresh, uncached point query against audience_grants, never a DbAudienceGrantsSource snapshot.

Trait Implementations

impl Clone for AudienceMintPolicy

fn clone(&self) -> AudienceMintPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AudienceMintPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for AudienceMintPolicy

fn default() -> AudienceMintPolicy

Returns the “default value” for a type.

impl MintPolicy for AudienceMintPolicy

fn resolve_audience<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, caller: &'life1 AuthContext, requested: Option<&'life2 str>, ) -> Pin<Box<dyn Future<Output = Result<String, Error>> + Send + 'async_trait>>

where 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, AudienceMintPolicy: 'async_trait,

Resolves the audience to stamp on a newly minted key, or Err if requested is outside what caller may mint (including requested: None – see the trait doc comment).