Add custom ACL resource and configure permissions

[nowiko]

Hello, I created custom controller class and want to apply access restriction on it. So according to Akeneo documentation I defined appropriate ACL. Then I wanted to restrict it for some role, so I went to 'System/ Users Management/ Roles' and it is not visible on tab 'Permissions'. So I tried to figure out how existing permissions list is included to UI.

I provided some research, and found it to be complicated. I found that it is related to following configuration:

oro_user:
    privileges:
        action:
            label: rights.action
            view_type: groups
            types: [action]
            field_type: pim_acl_access_level_selector
            default_value: 5
            show_default: true

And it is used by Oro\Bundle\SecurityBundle\Form\Type\PrivilegeCollectionType, but I can't find place where all ACL resources are collected for displaying. Or have I omitted something? Could you please clarify a little bit more about how it is working?

Regards, Victor.

[nowiko]

So, I figured out how to add ACL's have them to manage on permissions tab (though Akeneo documentation doesn't consist this information). But it still unclear how Akeneo handle acl.yml and UI gets this data.

Could you please clarify this?

Regards, Victor.

[juliensnz]

Hello,

This feature is provided by the ORO platform. That's why it's not explained in our documentation. Do you find this module important ? Maybe we can work on documentation proposition

About the page generation, to be 100% transparent with you, this is the only page in Akeneo I have no Idea how it is generated. So if you have time to dig into it, don't hesitate !

Best regards,

Julien

[nowiko]

Hello @juliensnz ,

Do you find this module important ?

Yes, I think this module is important

That's why it's not explained in our documentation. Maybe we can work on documentation proposition

I suppose this part of documentation is in 'Nice to have' category, not in 'Necessary'.

So if you have time to dig into it, don't hesitate !

If I have a free time I will investigate generation process.

Regards, Viktor.

[nowiko]

I consider this issue-question as not relevant anymore, so mark it as Closed.

[volkovmqx]

would you share how did you manage to make it appear on the roles management tab ?

[volkovmqx]

Just to share the knoweledge, Akeneo cache:clear command didnt remove the oro folders from app/cache/dev, i had to remove them manually and then the new roles pop up in the backend