Struct AudienceReadPolicy 

pub struct AudienceReadPolicy { /* private fields */ }

The shipped ReadPolicy: a lookup over an AudienceGrants map – and, when a DbAudienceGrantsSource is attached via with_store, a second lookup over that store’s snapshot – with no identity derivation anywhere. Resolves the readable set:

{ a : "*"            ∈ grants[a].read }
  ∪ { a : "user:<email>" ∈ grants[a].read }                  if email present
  ∪ { a : "group:<g>"    ∈ grants[a].read for some g ∈ caller.memberships }
  ∪ { a : selector       ∈ store.readers(a) matches caller } if a store is attached
  ∪ caller.read_audiences                                    // per-key direct grant

There is no self-audience rule – a caller is granted no audience merely for being named like one: the charset makes an email unrepresentable as an audience name, and keying on subject instead would let an admin mint themselves read access by naming a key after an audience.

read_audiences is folded in here but deliberately excluded from AudienceMintPolicy’s mintable set – a service-account key’s ability to see an audience must not imply it can stamp new keys with that audience (mint is integrity, read is confidentiality).

Implementations

impl AudienceReadPolicy

pub fn new(grants: AudienceGrants) -> AudienceReadPolicy

Builds a policy with an explicit static grant map.

pub fn with_store( self, store: Arc<SnapshotSource<AudienceGrantsLoader>>, ) -> AudienceReadPolicy

Attaches the DB-backed grant store. A builder method, not a constructor argument, so new/default keep working unchanged for every caller with no DB pool to back one (disabled-auth, tests).

Trait Implementations

impl Clone for AudienceReadPolicy

fn clone(&self) -> AudienceReadPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AudienceReadPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for AudienceReadPolicy

fn default() -> AudienceReadPolicy

Returns the “default value” for a type.

impl ReadPolicy for AudienceReadPolicy

fn resolve<'life0, 'life1, 'async_trait>( &'life0 self, caller: &'life1 AuthContext, ) -> Pin<Box<dyn Future<Output = Result<ReadableAudiences, Error>> + Send + 'async_trait>>

where 'life0: 'async_trait, 'life1: 'async_trait, AudienceReadPolicy: 'async_trait,

Resolves caller’s readable-audience set, or Err if the policy could not be evaluated (e.g. a backing store outage once a store-backed policy lands).