1 files changed, 38 insertions, 0 deletions
diff --git a/include/crm/common/acl.h b/include/crm/common/acl.h
new file mode 100644
index 0000000..655ad55
--- /dev/null
+++ b/include/crm/common/acl.h
@@ -0,0 +1,38 @@
+/*
+ * Copyright 2004-2022 the Pacemaker project contributors
+ *
+ * The version control history for this file may have further details.
+ *
+ * This source code is licensed under the GNU Lesser General Public License
+ * version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
+ */
+
+#ifndef PCMK__CRM_COMMON_ACL__H
+#  define PCMK__CRM_COMMON_ACL__H
+
+#  include <libxml/tree.h> // xmlNode
+#  include <stdbool.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/**
+ * \file
+ * \brief Low-level API for XML Access Control Lists (ACLs)
+ * \ingroup core
+ */
+
+bool xml_acl_enabled(const xmlNode *xml);
+void xml_acl_disable(xmlNode *xml);
+bool xml_acl_denied(const xmlNode *xml);
+bool xml_acl_filtered_copy(const char *user, xmlNode* acl_source, xmlNode *xml,
+                           xmlNode **result);
+
+bool pcmk_acl_required(const char *user);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif // PCMK__CRM_COMMON_ACL__H