Struct DecisionRecord

pub struct DecisionRecord {

    pub id: String,
    pub timestamp: DateTime<Utc>,
    pub effect: String,
    pub policies: Vec<String>,
    pub request_id: Option<String>,
    pub principal: String,
    pub action: String,
    pub resource: String,
    pub reasons: Vec<String>,
    pub session_id: Option<String>,
    pub agent_chain: Option<Vec<String>>,
    pub trace_id: Option<TraceId>,
    pub span_id: Option<SpanId>,
    pub tenant_id: Option<String>,
    pub subject_id: Option<String>,
    pub authenticated_actor: Option<AuthenticatedActor>,
}

Structured record written for every authorization decision.

Old readers (v1) ignore all unknown fields, so adding fields is backward-compatible at the JSON level.

Fields

id: String

timestamp: DateTime<Utc>

effect: String

policies: Vec<String>

request_id: Option<String>

principal: String

action: String

resource: String

reasons: Vec<String>

session_id: Option<String>

agent_chain: Option<Vec<String>>

trace_id: Option<TraceId>

W3C Trace Context trace ID, propagated from the request.

span_id: Option<SpanId>

W3C Trace Context span ID, propagated from the request.

tenant_id: Option<String>

Tenant ID for multi-tenant deployments.

subject_id: Option<String>

Subject ID for SAR queries (GDPR Art. 15).

authenticated_actor: Option<AuthenticatedActor>

Authenticated PDP caller. This is server-added audit metadata and is intentionally separate from Cedar context and the evaluated principal.

Implementations

impl DecisionRecord

pub fn from_decision( d: &Decision, session_id: Option<String>, agent_chain: Option<Vec<String>>, ) -> Self

Trait Implementations

impl Clone for DecisionRecord

fn clone(&self) -> DecisionRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DecisionRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DecisionRecord

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for DecisionRecord

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.