Struct KeyAccessControl 

pub struct KeyAccessControl { /* private fields */ }

Key access control

Implementations

impl KeyAccessControl

pub fn new() -> Self

pub fn initialize(&mut self) -> Result<(), CryptographicError>

pub fn add_policy(&mut self, policy: AccessPolicy)

Register an access policy for a key.

pub fn check_permission(&self, key_id: &str, operation: KeyOperation) -> bool

Check whether a given operation is permitted on a key. Returns true if a policy exists that explicitly allows the operation. Deny-by-default: no matching policy means denial.

pub fn check_permission_with_context( &self, key_id: &str, operation: KeyOperation, current_hour: u8, current_day: u8, ip_address: &str, ) -> bool

Check permission with full context (time restrictions, IP).

pub fn log_access( &mut self, key_id: &str, operation: KeyOperation, user_id: &str, success: bool, )

Record an access attempt in the audit log.

pub fn policy_count(&self) -> usize

Number of registered policies.

pub fn audit_log(&self) -> &AccessAuditLog

Get a reference to the audit log.

pub fn authentication_methods(&self) -> &[AuthenticationMethod]

Get the list of configured authentication methods.

pub fn add_authentication_method(&mut self, method: AuthenticationMethod)

Add an authentication method if not already present.

pub fn supports_authentication_method( &self, method: &AuthenticationMethod, ) -> bool

Check whether a given authentication method is supported.