NamespaceValidator returns a func that wraps ACL.AllowNamespaceOperation in a list of operations.

NewACL compiles a set of policies into an ACL object.

Parse is used to parse the specified ACL rules into an intermediary set of policies, before being compiled into the ACL.

The following levels are the only valid values for the `policy = "read"` stanza.

ManagementACL is a singleton used for management tokens.

ACL object is used to convert a set of policies into a structure that can be efficiently evaluated to determine if an action is allowed.

HostVolumePolicy is the policy for a specific named host volume.

NamespacePolicy is the policy for a specific namespace.

Policy represents a parsed HCL or JSON policy.