declare const rbacHttpAdmin: {
    system: {
        dirs: {
            controllers: string[];
            locales: string[];
            views: string[];
        };
    };
    rbac: {
        admin: {
            /**
             * Guards applied to every admin operation that changes what an account may
             * do. Defaults are the strict end — see IRoleGuardConfig for what each one
             * refuses and why. Turn individual checks off here rather than replacing
             * the service.
             */
            roleGuard: {
                service: string;
                requireKnownRole: boolean;
                protectSystemRole: boolean;
                preventEscalation: boolean;
                preventSelfLockout: boolean;
                preventLastPrivilegedRemoval: boolean;
                /**
                 * What makes a role "privileged" for the self-lockout and last-holder
                 * checks. Action uses accesscontrol grant notation, exactly as written
                 * in `rbac.grants`.
                 */
                privilegedResource: string;
                privilegedAction: string;
            };
        };
    };
};
export default rbacHttpAdmin;
//# sourceMappingURL=rbac-http-admin.d.ts.map