Sonatra Security Bundle

The Sonatra SecurityBundle implements all functionnalities of Symfony Advanced ACL Concepts and adds some interesting features.

Features include:

• Ability to define permissions for Entity (Class, Class Field, Record, Record Field)
• Service manipulator (helper) for ACL/ACE manipulation (read, grant, revoke permissions)
• Service manager (helper) for check granting on domain object (granted, field granted, preload ACLs)
• ACL Rule Definition for optimize the ACL queries (and ability to create a sharing rule)
• ACL Rule Filter Definition for filter the records in query
• ACL Voter for use the security.authorization_checker service
• Ability to set permissions on roles or users, but also directly on groups
• Ability to define a hierarchy of role (with all roles in all associated groups)
• Merge the permissions of roles children of associated roles with user, role, group, and token
• Define a role for various host with direct injection in token (regex compatible)
• Execution cache system for the ACL/ACE getter
• Execution cache and PSR-6 Caching Implementation for the determination of all roles in hierarchy (with user, group, role, token)
• Doctrine ORM Filter for filter the records in query (using ACL Rule Filter Definition)
• Doctrine Listener for empty the record field value for all query type
• Doctrine Listener for keep the old value in the record field value if the user has not the permission of action
• Ability to define a role for a hostname (defined with regex)
• Ability to replace the hasPermission() JMS Expression (and twig function)
• Ability to add the hasFieldPermission() JMS Expression (and twig function)
• Ability to replace the hasRole() JMS Expression (and twig function)
• Ability to replace the hasAnyRole() JMS Expression (and twig function)
• Commands for:

• create/delete a user
• create/delete a role
• create/delete a group
• promote/demote a user
• promote/demote a group
• associate/disassociate a user from a group
• add/remove child of role
• add/remove parent of role
• grant/revoke permissions by user, by role or by group for a defined class (or record entity)
• display direct and indirect roles of user (host role compatible)
• display direct and indirect roles of group (host role compatible)
• display direct and indirect children of role (host role compatible)
• display the permissions by user or by role for a defined class (or a record entity)
• display the calculated permissions by user or by role for a defined class (or a record entity)

Documentation

The bulk of the documentation is stored in the Resources/doc/index.md file in this bundle:

Read the Documentation

Installation

All the installation instructions are located in documentation.

License

This bundle is under the MIT license. See the complete license in the bundle:

Resources/meta/LICENSE

About

Sonatra SecurityBundle is a sonatra initiative. See also the list of contributors.

Reporting an issue or a feature request

Issues and feature requests are tracked in the Github issue tracker.

When reporting a bug, it may be a good idea to reproduce it in a basic project built using the Symfony Standard Edition to allow developers of the bundle to reproduce the issue by simply cloning it and following some steps.