eba4fd1
use uuid::Uuid;
use crate::errors::AdminError;
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum AdminRole {
SuperAdmin,
Operator,
Viewer,
}
#[derive(Debug, Clone)]
pub struct AdminActor {
pub id: Uuid,
pub username: String,
pub display_name: String,
pub role: AdminRole,
pub must_change_password: bool,
}
impl AdminActor {
pub fn level(role: AdminRole) -> u8 {
match role {
AdminRole::SuperAdmin => 3,
AdminRole::Operator => 2,
AdminRole::Viewer => 1,
}
}
pub fn is_super(&self) -> bool {
matches!(self.role, AdminRole::SuperAdmin)
}
pub fn require(&self, minimum: AdminRole) -> Result<(), AdminError> {
if Self::level(self.role) >= Self::level(minimum) {
Ok(())
} else {
Err(AdminError::Forbidden)
}
}
}