pub fn validate_grant(user: &str, grant: &str) -> Result<String, String>Expand description
Checks one grant column pair against the real ACL parser and returns it in canonical spelling.
§Errors
Returns a message when the pair does not parse, or when it names
crate::acl::Scope::Node: node-wide authority is what D33’s rate-limit
exemption and D29’s whole-node reads key on, so it stays operator-
authored in the ACL file and is never self-service.