Struct ConfigWriteAuthorization 

pub struct ConfigWriteAuthorization { /* private fields */ }

Proof that a mutation’s complete write set was authorized before its first side effect. The persist boundary requires one and re-checks that nothing outside the authorized set is about to be written, then publishes the policy of what it wrote through the admitting authority.

Implementations

impl ConfigWriteAuthorization

pub fn covers_all<'a>( &self, dirty: impl IntoIterator<Item = &'a str>, ) -> Result<(), WriteDenied>

Refuse when dirty, the paths about to be persisted, reaches beyond the authorized write set: the handler could not identify its complete write set up front, and a scoped principal is refused rather than trusted with the remainder.

pub fn publish_persisted(&self, persisted: &Config)

Publish the policy compiled from the configuration just persisted. The persist boundary proves the staged policy compiles before it writes, so a failure here is an invariant violation: it is logged, and the previously accepted policy stays in force.