https://github.com/cron-eu/acls_from_hell
Read TYPO3 ACLs for be_users from YAML files
https://github.com/cron-eu/acls_from_hell
acls typo3 typo3-extension
Last synced: 4 months ago
JSON representation
Read TYPO3 ACLs for be_users from YAML files
- Host: GitHub
- URL: https://github.com/cron-eu/acls_from_hell
- Owner: cron-eu
- Created: 2022-08-05T11:37:30.000Z (almost 4 years ago)
- Default Branch: main
- Last Pushed: 2026-01-31T14:54:38.000Z (5 months ago)
- Last Synced: 2026-02-01T02:30:53.389Z (5 months ago)
- Topics: acls, typo3, typo3-extension
- Language: PHP
- Homepage:
- Size: 25.4 KB
- Stars: 2
- Watchers: 2
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# ACLs from files
This TYPO3 extension allows to put the values of the following fields of table `be_groups` into external yaml files:
* `non_exclude_fields`
* `explicit_allowdeny`
* `pagetypes_select`
* `tables_select`
* `tables_modify`
* `groupMods`
* `availableWidgets`
* `file_permissions`
## How does it work?
When calculating the "permissions" for the current BE user (see `BackendUserAuthentication->fetchGroups()`) a post-process hook will resolve file references for each BE group to external yaml files and add their contents to the comma separated fields mentioned above.
## Important hint
Keep in mind: this is not an override mechanism but an addition of comma separated values!
So be sure to clear the values of the above mentioned fields when selecting an external file.
This might help:
```sql
UPDATE be_groups SET non_exclude_fields=NULL,explicit_allowdeny=NULL,pagetypes_select=NULL,tables_select=NULL,tables_modify=NULL,groupMods=NULL,availableWidgets=NULL,file_permissions=NULL WHERE tx_aclsfromhell_file <> '';
```
## Export existing ACLs
To export the ACLs of an existing group to a yaml file call this:
```
bin/typo3 acls_from_hell:export [--dry-run] [--verbose]
```
This command:
* creates a new yaml file within the `config/acls/` folder containing the ACL fields of the given group
* sets `tx_aclsfromhell_file` to that new file
* empties the values of the above mentioned fields