Open/closed principle - how to use RBAC in a plugin? - Githubissues

Sylius / RbacPlugin

Sylius roles and permissions management plugin

32 stars 38 forks source link

Open/closed principle - how to use RBAC in a plugin? #18

Closed pamil closed 5 years ago

pamil commented 5 years ago

Since all permissions are right now hardcoded https://github.com/Sylius/RbacPlugin/blob/master/src/Model/Permission.php#L11-L15, how would we allow 3rd-party plugins to make use of this authorization configuration?

The ideal use-case from plugin provider POV would be to:

create a plugin (let's say invoicing)
require this RBAC plugin
add some new types of permissions by a tagged service (or some config)
use this plugin to restrict access to invoices