Skip to main content

UserRoleAssignment

Struct UserRoleAssignment 

Source
pub struct UserRoleAssignment {
    pub id: Uuid,
    pub user_id: Uuid,
    pub role: UserRole,
    pub organization_id: Option<Uuid>,
    pub is_primary: bool,
    pub valid_until: Option<DateTime<Utc>>,
    pub delegated_from_user_id: Option<Uuid>,
    pub created_at: DateTime<Utc>,
    pub updated_at: DateTime<Utc>,
}
Expand description

Represents an assignment of a role to a user within an optional organization scope.

§Story 3.5 — Temporary role delegation (FR8 INV-8)

Two optional fields turn a permanent native assignment into a time-bounded delegated assignment:

  • valid_until = None ⇒ permanent / native role (legacy behaviour).
  • valid_until = Some(t) ⇒ delegated assignment that auto-expires at t.
  • delegated_from_user_id = Some(delegator) ⇒ trail of who delegated the role; used by crate::application::use_cases::RoleDelegationUseCases to enforce the non-transitive invariant (a user cannot re-delegate a role that was itself delegated to them).

Fields§

§id: Uuid§user_id: Uuid§role: UserRole§organization_id: Option<Uuid>§is_primary: bool§valid_until: Option<DateTime<Utc>>

Story 3.5: end of validity. None = permanent native role.

§delegated_from_user_id: Option<Uuid>

Story 3.5: source of the delegation. None = native role. Some(uid) = uid granted this role for a bounded duration.

§created_at: DateTime<Utc>§updated_at: DateTime<Utc>

Implementations§

Source§

impl UserRoleAssignment

Source

pub fn new( user_id: Uuid, role: UserRole, organization_id: Option<Uuid>, is_primary: bool, ) -> Self

Creates a new permanent (native) role assignment.

valid_until and delegated_from_user_id default to None. Use UserRoleAssignment::new_delegated for a time-bounded delegation.

Source

pub fn new_delegated( user_id: Uuid, role: UserRole, organization_id: Option<Uuid>, valid_until: DateTime<Utc>, delegated_from_user_id: Uuid, ) -> Self

Creates a new delegated role assignment (Story 3.5).

A delegated assignment is never the primary role of the target user — keeping the user’s native primary intact for users.role consistency.

Source

pub fn set_primary(&mut self, primary: bool)

Source

pub fn is_delegated(&self) -> bool

True if this assignment is a delegated (non-native) role.

Source

pub fn is_expired(&self) -> bool

True if the assignment carries a valid_until and it is in the past.

A permanent native role (valid_until = None) is never expired.

Source

pub fn is_expired_at(&self, t: DateTime<Utc>) -> bool

Testable variant of is_expired taking an explicit reference time.

Source

pub fn is_currently_active(&self) -> bool

True if the assignment authorises actions right now.

Native (permanent) assignments are always active. Delegated assignments are active iff their window has not elapsed.

Trait Implementations§

Source§

impl Clone for UserRoleAssignment

Source§

fn clone(&self) -> UserRoleAssignment

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for UserRoleAssignment

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl<'de> Deserialize<'de> for UserRoleAssignment

Source§

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>
where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more
Source§

impl Eq for UserRoleAssignment

Source§

impl From<UserRoleAssignment> for UserRoleAssignmentResponse

Source§

fn from(a: UserRoleAssignment) -> Self

Converts to this type from the input type.
Source§

impl From<UserRoleAssignment> for RoleDelegationResponse

Source§

fn from(a: UserRoleAssignment) -> Self

Converts to this type from the input type.
Source§

impl PartialEq for UserRoleAssignment

Source§

fn eq(&self, other: &UserRoleAssignment) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 (const: unstable) · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl Serialize for UserRoleAssignment

Source§

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>
where __S: Serializer,

Serialize this value into the given Serde serializer. Read more
Source§

impl StructuralPartialEq for UserRoleAssignment

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
§

impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
where ST: ?Sized, DT: ?Sized,

§

impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
where ST: ?Sized, DT: ?Sized,

Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,

§

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

§

fn equivalent(&self, key: &K) -> bool

Compare self to key and return true if they are equal.
§

impl<T> Fake for T

§

fn fake<U>(&self) -> U
where Self: FakeBase<U>,

§

fn fake_with_rng<U, R>(&self, rng: &mut R) -> U
where R: RngExt + ?Sized, Self: FakeBase<U>,

Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T> Instrument for T

§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided [Span], returning an Instrumented wrapper. Read more
§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> IntoEither for T

Source§

fn into_either(self, into_left: bool) -> Either<Self, Self>

Converts self into a Left variant of Either<Self, Self> if into_left is true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

Converts self into a Left variant of Either<Self, Self> if into_left(&self) returns true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
§

impl<Unshared, Shared> IntoShared<Shared> for Unshared
where Shared: FromUnshared<Unshared>,

§

fn into_shared(self) -> Shared

Creates a shared type from an unshared type.
§

impl<T> PolicyExt for T
where T: ?Sized,

§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] only if self and other return Action::Follow. Read more
§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] if either self or other returns Action::Follow. Read more
§

impl<T> Read<Exclusive, BecauseExclusive> for T
where T: ?Sized,

Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

§

fn vzip(self) -> V

§

impl<T> WithSubscriber for T

§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a [WithDispatch] wrapper. Read more
§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a [WithDispatch] wrapper. Read more