Struct Policy

pub struct Policy { /* private fields */ }

Policy for a resource that controls compliance checking for data flows.

A Policy combines multiple dimensions of access control and resource management to determine whether data flows involving a resource should be permitted.

Fields

• confidentiality: Controls whether the resource contains sensitive data
• integrity: Numeric trust level (0 = lowest, higher = more trusted)
• deleted: Tracks deletion status through a multi-phase process
• consent: WIP…

Policy Evaluation

When evaluating flows between resources, policies are checked to ensure:

1. No deleted resources are involved
2. Integrity levels are compatible (source >= destination)
3. Confidentiality is preserved (secret data doesn’t leak to public)
4. All parties have given consent

This policy is used to check the compliance of input/output flows of the associated resource.

Implementations

impl Policy

pub fn new( confidentiality: ConfidentialityPolicy, integrity: u32, deleted: DeletionPolicy, consent: bool, ) -> Self

Creates a new policy with the specified parameters.

Arguments

• confidentiality - The confidentiality level for the resource
• integrity - The integrity level (0 = lowest, higher = more trusted)
• deleted - The deletion status
• consent - Whether the resource owner consent is required for flows

pub fn is_confidential(&self) -> bool

Returns true if the resource contains confidential data.

This is a convenience method that checks if the confidentiality policy is set to Secret.

pub fn is_deleted(&self) -> bool

Returns true if the resource is deleted or pending deletion.

Resources that are deleted cannot participate in data flows.

pub fn is_pending_deletion(&self) -> bool

Returns true if the resource is pending deletion.

This indicates the resource has been marked for deletion but hasn’t been fully removed yet.

pub fn get_integrity(&self) -> u32

Returns the integrity level of the resource.

Higher values indicate more trusted data. For flows to be permitted, the source integrity must be greater than or equal to the destination integrity.

pub fn get_consent(&self) -> bool

Returns true if the resource owner has given consent for flows.

When consent is false, flows involving this resource should be denied.

pub fn with_consent(&mut self, consent: bool) -> ComplianceResponse

Updates the consent flag for this policy.

Returns PolicyUpdated if the consent was successfully changed, or PolicyNotUpdated if the resource is deleted and cannot be modified.

pub fn with_integrity(&mut self, integrity: u32) -> ComplianceResponse

Updates the integrity level for this policy.

Returns PolicyUpdated if the integrity was successfully changed, or PolicyNotUpdated if the resource is deleted and cannot be modified.

Arguments

• integrity - The new integrity level

pub fn with_confidentiality( &mut self, confidentiality: ConfidentialityPolicy, ) -> ComplianceResponse

Updates the confidentiality level for this policy.

Returns PolicyUpdated if the confidentiality was successfully changed, or PolicyNotUpdated if the resource is deleted and cannot be modified.

Arguments

• confidentiality - The new confidentiality level

pub fn deleted(&mut self) -> ComplianceResponse

Marks the resource for deletion.

This transitions the resource from NotDeleted to Pending deletion status. Once marked for deletion, the policy cannot be further modified.

Returns PolicyUpdated if the deletion was successfully marked as pending, or PolicyNotUpdated if the resource is already deleted or pending deletion.

pub fn deletion_enforced(&mut self) -> ComplianceResponse

Marks the deletion as enforced for a resource that is pending deletion.

This transitions the resource from Pending to Deleted status. This method should be called after the actual deletion has been performed.

Returns PolicyUpdated if the deletion was successfully marked, or PolicyNotUpdated if the resource is not pending deletion.

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Self

Returns the “default value” for a type.

impl From<Policy> for DestinationCompliance

Converts internal Policy to Protocol Buffer DestinationCompliance response.

fn from(policy: Policy) -> Self

Converts to this type from the input type.

impl From<Policy> for Policy

fn from(policy: Policy) -> Self

Converts to this type from the input type.

impl From<Policy> for Policy

fn from(proto_policy: Policy) -> Self

Converts to this type from the input type.

impl PartialEq for Policy

fn eq(&self, other: &Policy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for Policy

impl StructuralPartialEq for Policy