pulp::inspect::InspectorAccessPolicy Class Reference

Resolves named profiles and exact custom grants against capabilities that the host actually attached. More...

#include <session.hpp>

Public Member Functions
	InspectorAccessPolicy (InspectorPolicyConfig config={})
InspectorProfile	profile () const
std::span< const InspectorCapability >	available_capabilities () const
std::span< const InspectorCapability >	effective_capabilities () const
bool	is_available (InspectorCapability capability) const
bool	is_granted (InspectorCapability capability) const
std::optional< InspectorMessage >	authorize (const InspectorMessage &request, bool owns_controller_lease) const
	Returns an error response when the request is unknown, unavailable, not granted, or requires a controller lease that the caller does not own.

Detailed Description

Resolves named profiles and exact custom grants against capabilities that the host actually attached.

Resolution is fail-closed: an empty availability set exposes nothing, and runtime.eval additionally requires its separate acknowledgement.

Constructor & Destructor Documentation

InspectorAccessPolicy()

pulp::inspect::InspectorAccessPolicy::InspectorAccessPolicy ( InspectorPolicyConfig config = {} )

explicit

Member Function Documentation

authorize()

std::optional< InspectorMessage > pulp::inspect::InspectorAccessPolicy::authorize	(	const InspectorMessage &	request,
		bool	owns_controller_lease ) const

Returns an error response when the request is unknown, unavailable, not granted, or requires a controller lease that the caller does not own.

available_capabilities()

std::span< const InspectorCapability > pulp::inspect::InspectorAccessPolicy::available_capabilities ( ) const

inline

effective_capabilities()

std::span< const InspectorCapability > pulp::inspect::InspectorAccessPolicy::effective_capabilities ( ) const

inline

is_available()

bool pulp::inspect::InspectorAccessPolicy::is_available

(

InspectorCapability

capability

)

const

is_granted()

bool pulp::inspect::InspectorAccessPolicy::is_granted

(

InspectorCapability

capability

)

const

profile()

InspectorProfile pulp::inspect::InspectorAccessPolicy::profile ( ) const

inline

---

The documentation for this class was generated from the following file:

• /home/runner/work/pulp/pulp/inspect/include/pulp/inspect/session.hpp