How to get Entity Permission Information Based on Role Provided

Hi Team ,

We are trying to fetch Permission i.e View, Edit , Create ,Delete for specific entities and also type set for it like Global , Business Unit, User , None based on Role specified. We are stuck on how to get this information.
We looked for document reference from https://github.com/oroinc/platform/blob/master/src/Oro/Bundle/SecurityBundle/Resources/doc/acl-manager.md and tried following similar steps where in we need to fetch Permission information instead of adding of permissions like is given below – Use case is we would have logged in as user of different role (like Manager ROLE) but need to get other Role information (like SALESMAN ROLE):

PHP

$manager= $this->get('oro_security.acl.manager'); $sid = $manager->getSid('ROLE_SALESMAN'); $oid = $manager->getOid('entity:' . User::class); $oids[0] = $oid; $result = $manager->findAcls($sid,$oids);

1 2 3 4 5

$manager= $this->get('oro_security.acl.manager'); $sid = $manager->getSid('ROLE_SALESMAN'); $oid = $manager->getOid('entity:' . User::class); $oids[0] = $oid; $result = $manager->findAcls($sid,$oids);

But we are not getting result which we need. Please need help if any resource / guidance on how to fetch the Permission related information based on Role Specified & not on User Token / Logged in User.
There is some masking operation taking place which we are not clear. We also tried looking at Roles View Module but could not figure out.

Thanks & Regards,
Shreyas S

Topic

[Andrey YatsenkoModerator]

Permissions can be granted or denied by various reasons, ACL is not the only Voter used by Oro.

So there is no way to easily get entity permission. You can only check it with AuthorizationChecker::isGranted() method

[shreyasParticipant]

Thanks Andrey for the guidance.

Thanks & Regards,
Shreyas S

[Author]

Replies