Struct DMSCPermissionManager 

pub struct DMSCPermissionManager { /* private fields */ }

Permission manager for handling permissions, roles, and user assignments.

This struct manages the entire RBAC system, including:

• Permission CRUD operations
• Role CRUD operations
• User role assignments
• Permission checking for users

Implementations

impl DMSCPermissionManager

pub fn new() -> Self

Creates a new permission manager with default system roles.

Initializes the manager with two default system roles:

• admin: Has wildcard permission (“*”) for all access
• user: Has basic user permissions

Performance Note: This method uses blocking_write during initialization to set up default roles. For production use, consider using new_async() or lazy initialization patterns to avoid blocking the async runtime.

Returns

A new instance of DMSCPermissionManager

pub async fn new_async() -> Self

Creates a new permission manager asynchronously with default system roles.

This is the preferred method for creating a permission manager in async contexts as it avoids blocking the runtime during initialization.

Initializes the manager with two default system roles:

• admin: Has wildcard permission (“*”) for all access
• user: Has basic user permissions

Returns

A new instance of DMSCPermissionManager

pub async fn create_permission( &self, permission: DMSCPermission, ) -> DMSCResult<()>

Creates a new permission.

Parameters

• permission: Permission to create

Returns

Ok(()) if the permission was successfully created

pub async fn get_permission( &self, permission_id: &str, ) -> DMSCResult<Option<DMSCPermission>>

Gets a permission by ID.

Parameters

• permission_id: Permission ID to retrieve

Returns

Some(DMSCPermission) if the permission exists, otherwise None

pub async fn create_role(&self, role: DMSCRole) -> DMSCResult<()>

Creates a new role.

Parameters

• role: Role to create

Returns

Ok(()) if the role was successfully created

pub async fn get_role(&self, role_id: &str) -> DMSCResult<Option<DMSCRole>>

Gets a role by ID.

Parameters

• role_id: Role ID to retrieve

Returns

Some(DMSCRole) if the role exists, otherwise None

pub async fn assign_role_to_user( &self, user_id: String, role_id: String, ) -> DMSCResult<bool>

Assigns a role to a user.

Parameters

• user_id: User ID to assign the role to
• role_id: Role ID to assign

Returns

true if the role was successfully assigned, false if the role doesn’t exist

pub async fn remove_role_from_user( &self, user_id: &str, role_id: &str, ) -> DMSCResult<bool>

Removes a role from a user.

Parameters

• user_id: User ID to remove the role from
• role_id: Role ID to remove

Returns

true if the role was successfully removed, false if the user didn’t have the role

pub async fn get_user_roles(&self, user_id: &str) -> DMSCResult<Vec<DMSCRole>>

Gets all roles assigned to a user.

Parameters

• user_id: User ID to retrieve roles for

Returns

A vector of DMSCRole objects assigned to the user

pub async fn has_permission( &self, user_id: &str, permission_id: &str, ) -> DMSCResult<bool>

Checks if a user has a specific permission.

Parameters

• user_id: User ID to check
• permission_id: Permission ID to check for

Returns

true if the user has the permission, otherwise false

Notes

• Users with the wildcard permission (“*”) have all permissions
• Permission checking is done by examining all roles assigned to the user

pub async fn has_any_permission( &self, user_id: &str, permissions: &[String], ) -> DMSCResult<bool>

Checks if a user has any of the specified permissions.

Parameters

• user_id: User ID to check
• permissions: List of permission IDs to check for

Returns

true if the user has at least one of the permissions, otherwise false

pub async fn has_all_permissions( &self, user_id: &str, permissions: &[String], ) -> DMSCResult<bool>

Checks if a user has all of the specified permissions.

Parameters

• user_id: User ID to check
• permissions: List of permission IDs to check for

Returns

true if the user has all of the permissions, otherwise false

pub async fn get_user_permissions( &self, user_id: &str, ) -> DMSCResult<HashSet<String>>

Gets all permissions assigned to a user.

Parameters

• user_id: User ID to retrieve permissions for

Returns

A set of permission IDs assigned to the user

pub async fn delete_permission(&self, permission_id: &str) -> DMSCResult<bool>

Deletes a permission.

Parameters

• permission_id: Permission ID to delete

Returns

true if the permission was successfully deleted, otherwise false

pub async fn delete_role(&self, role_id: &str) -> DMSCResult<bool>

Deletes a role.

Parameters

• role_id: Role ID to delete

Returns

true if the role was successfully deleted, otherwise false

Notes

• System roles cannot be deleted
• If the role is deleted, it is removed from all users

pub async fn list_permissions(&self) -> DMSCResult<Vec<DMSCPermission>>

Lists all permissions.

Returns

A vector of all registered permissions

pub async fn list_roles(&self) -> DMSCResult<Vec<DMSCRole>>

Lists all roles.

Returns

A vector of all registered roles

Trait Implementations

impl Default for DMSCPermissionManager

fn default() -> Self

Returns the “default value” for a type.

impl<'py> IntoPyObject<'py> for DMSCPermissionManager

type Target = DMSCPermissionManager

The Python output type

type Output = Bound<'py, <DMSCPermissionManager as IntoPyObject<'py>>::Target>

The smart pointer type to use.

type Error = PyErr

The type returned in the event of a conversion error.

fn into_pyobject( self, py: Python<'py>, ) -> Result<<Self as IntoPyObject<'_>>::Output, <Self as IntoPyObject<'_>>::Error>

Performs the conversion.

impl PyClass for DMSCPermissionManager

type Frozen = False

Whether the pyclass is frozen.

impl PyClassImpl for DMSCPermissionManager

const IS_BASETYPE: bool = false

#[pyclass(subclass)]

const IS_SUBCLASS: bool = false

#[pyclass(extends=…)]

const IS_MAPPING: bool = false

#[pyclass(mapping)]

const IS_SEQUENCE: bool = false

#[pyclass(sequence)]

const IS_IMMUTABLE_TYPE: bool = false

#[pyclass(immutable_type)]

const RAW_DOC: &'static CStr = /// - Permission checking for users

Docstring for the class provided on the struct or enum.

const DOC: &'static CStr

Fully rendered class doc, including the text_signature if a constructor is defined.

type BaseType = PyAny

Base class

type ThreadChecker = SendablePyClass<DMSCPermissionManager>

This handles following two situations:

type PyClassMutability = <<PyAny as PyClassBaseType>::PyClassMutability as PyClassMutability>::MutableChild

Immutable or mutable

type Dict = PyClassDummySlot

Specify this class has #[pyclass(dict)] or not.

type WeakRef = PyClassDummySlot

Specify this class has #[pyclass(weakref)] or not.

type BaseNativeType = PyAny

The closest native ancestor. This is PyAny by default, and when you declare #[pyclass(extends=PyDict)], it’s PyDict.

fn items_iter() -> PyClassItemsIter

fn lazy_type_object() -> &'static LazyTypeObject<Self>

fn dict_offset() -> Option<isize>

fn weaklist_offset() -> Option<isize>

impl PyClassNewTextSignature for DMSCPermissionManager

const TEXT_SIGNATURE: &'static str = "()"

impl PyMethods<DMSCPermissionManager> for PyClassImplCollector<DMSCPermissionManager>

fn py_methods(self) -> &'static PyClassItems

impl PyTypeInfo for DMSCPermissionManager

const NAME: &'static str = "DMSCPermissionManager"

Class name.

const MODULE: Option<&'static str> = ::core::option::Option::None

Module name, if any.

fn type_object_raw(py: Python<'_>) -> *mut PyTypeObject

Returns the PyTypeObject instance for this type.

fn type_object(py: Python<'_>) -> Bound<'_, PyType>

Returns the safe abstraction over the type object.

fn is_type_of(object: &Bound<'_, PyAny>) -> bool

Checks if object is an instance of this type or a subclass of this type.

fn is_exact_type_of(object: &Bound<'_, PyAny>) -> bool

Checks if object is an instance of this type.

impl DerefToPyAny for DMSCPermissionManager

impl ExtractPyClassWithClone for DMSCPermissionManager