Struct PolicyView 

pub(crate) struct PolicyView<P: PolicyDefinition> {
    organization_id: OrganizationId,
    enabled: bool,
    data: P::Data,
}

A Policy resolved against the concrete PolicyDefinition that handles it.

This is the typed domain value the untyped wire Policy transforms into at the boundary: the r#type discriminant has been matched and the untyped data blob parsed into PolicyDefinition::Data, so a policy can only ever be paired with its own data type.

Note: despite the View suffix, this is internal enforcement machinery, not a client-facing DTO. It is generic over the pub(crate) PolicyDefinition trait and stays pub(crate). This inverts the Cipher/CipherView convention (where the View is the client-facing type) — a deliberate, documented divergence.

Fields

organization_id: OrganizationId

enabled: bool

data: P::Data

Implementations

impl<P: PolicyDefinition> PolicyView<P>

pub(crate) fn resolve(policy: &P, view: &Policy) -> Option<Self>

Resolves view against policy, returning Some only when the view is the type handled by policy.

Deserializes the untyped data blob into P::Data, falling back to Default (with a warning) when it is absent or fails to parse.

By default, a single unrecognised value within P::Data will fail parsing of the entire struct. Individual policies should provide their own handling at the field level if this is unacceptable.

pub(crate) fn into_enforced( self, policy: &P, organization_user_policy_contexts: &HashMap<OrganizationId, &OrganizationUserPolicyContext>, ) -> PolicyDecision<P>

Consumes the resolved view into a PolicyDecision, evaluating whether policy is enforced against the user.

Pass in all organization contexts for this user; the specific context is looked up by this method so that a mismatch between policy and organization is not possible. If no context is present for the organization, the policy is enforced by default (err on the side of enforcement).