2020-11-23-make-acl-plugin-privileges-dynamic.md

title	issue	author	author_email	author_github
Make acl plugin privileges dynamic	NEXT-11917	Lennart Tinkloh	[email protected]	lernhart

Core

• Added Shopware\Core\Framework\Api\Acl\Role\AclRoleEvents to add some acl role specific events.
• Added Shopware\Core\Framework\Plugin\Subscriber\PluginAclPrivilegesSubscriber to subscribe to acl.loaded event and add plugin privileges on runtime.
• Added Shopware\Core\Framework\Plugin::enrichPrivileges() method.
• Deprecated Shopware\Core\Framework\Plugin::addPrivileges() for tag:v6.4.0.0.
• Deprecated Shopware\Core\Framework\Plugin::removePrivileges() for tag:v6.4.0.0.

---

Upgrade Information

Plugin acl - Use enrichPrivileges instead of addPrivileges

The current behaviour of adding privileges via plugins is deprecated for 6.4.0.0. Instead of writing custom plugin privileges via Shopware\Core\Framework\Plugin::addPrivileges() right into the database, plugins now should override the new enrichPrivileges() method to add privileges on runtime. This method should return an array in the following structure:

<?php declare(strict_types=1);

namespace MyPlugin;

use Shopware\Core\Framework\Plugin;

class SwagTestPluginAcl extends Plugin
{
    public function enrichPrivileges(): array
    {
        return [
            'product.viewer' => [
                'my_custom_privilege:read',
                'my_custom_privilege:write',
                'my_other_custom_privilege:read',
                // ...
            ],
            'product.editor' => [
                // ...
            ],
        ];
    }
}