Expand description
Role and capability management APIs. Role and capability management APIs for Audit Trails.
This module is the Rust-facing wrapper around the access-control state integrated into each audit trail.
Roles grant crate::core::types::PermissionSet values, while capability objects bind one role to one trail and
may add optional address or time restrictions.
Additional record-tag constraints are represented as crate::core::types::RoleTags. They narrow which tagged
records a role may operate on, but they do not replace the underlying permission checks enforced by the Move
package.
Structsยง
- Cleanup
Revoked Capabilities - Transaction that cleans up expired revoked-capability entries.
- Create
Role - Transaction that creates a role on a trail.
- Delete
Role - Transaction that deletes a role.
- Destroy
Capability - Transaction that destroys a capability object.
- Destroy
Initial Admin Capability - Transaction that destroys an initial-admin capability without an auth capability.
- Issue
Capability - Transaction that issues a capability for a role.
- Revoke
Capability - Transaction that revokes a capability.
- Revoke
Initial Admin Capability - Transaction that revokes an initial-admin capability.
- Role
Handle - Role-scoped access-control API.
- Trail
Access - Access-control API scoped to a specific trail.
- Update
Role - Transaction that updates an existing role.