LoadAuthorizer instantiates, configures, and initialises an Authorizer.

NewObject returns an Object of the given type.

ObjectCertificate represents a certificate.

ObjectFromRequest returns an object created from the request by evaluating the given mux vars.

ObjectFromString parses a string into an Object.

ObjectImage represents an image.

ObjectImageAlias represents an image alias.

ObjectInstance represents an instance.

ObjectNetwork represents a network.

ObjectNetworkACL represents a network ACL.

ObjectNetworkIntegration represents a network integration.

ObjectNetworkZone represents a network zone.

ObjectProfile represents a profile.

ObjectProject represents a project.

ObjectServer represents a server.

ObjectStorageBucket represents a storage bucket.

ObjectStoragePool represents a storage pool.

ObjectStorageVolume represents a storage volume.

ObjectUser represents a user.

WithConfig can be passed into LoadAuthorizer to pass in driver specific configuration.

WithProjectsGetFunc should be passed into LoadAuthorizer when DriverRBAC is used.

WithResourcesFunc should be passed into LoadAuthorizer when DriverOpenFGA is used.

DriverOpenFGA provides fine-grained authorization.

DriverTLS is the default TLS authorization driver.

Project entitlements.

Server entitlements.

Entitlements that apply to all resources.

Instance and storage volume entitlements.

Instance entitlements.

ObjectTypeCertificate represents a certificate.

ObjectTypeImage represents an image.

ObjectTypeImageAlias represents an image alias.

ObjectTypeInstance represents an instance.

ObjectTypeNetwork represents a network.

ObjectTypeNetworkACL represents a network ACL.

ObjectTypeNetworkIntegration represents a network integration.

ObjectTypeNetworkZone represents a network zone.

ObjectTypeProfile represents a profile.

ObjectTypeProject represents a project.

ObjectTypeServer represents a server.

ObjectTypeStorageBucket represents a storage bucket.

ObjectTypeStoragePool represents a storage pool.

ObjectTypeStorageVolume represents a storage volume.

ObjectTypeUser represents a user.

ErrUnknownDriver is the "Unknown driver" error.

Opts is used as part of the LoadAuthorizer function so that only the relevant configuration fields are passed into a particular driver.

Resources represents a set of current API resources as Object slices for use when loading an Authorizer.

Authorizer is the primary external API for this package.

Entitlement is a type representation of a permission as it applies to a particular ObjectType.

Object is a string alias that represents an authorization object.

ObjectType is a type of resource within Incus.

PermissionChecker is a type alias for a function that returns whether a user has required permissions on an object.