You are browsing documentation for version 5.0 of OroCommerce, OroCRM, and OroPlatform, maintained until August 2024 and supported until March 2026. Read version 5.1 (the latest LTS version) of the Oro documentation to get up-to-date information.

See our Release Process documentation for more information on the currently supported and upcoming releases.


This annotation is used to protect a controller based on an existing access control list. The ID of the parent access control list is passed as the only option:

// ...
use Oro\Bundle\SecurityBundle\Annotation\AclAncestor;

 * @AclAncestor("an_acl_id")
public function demoAction()
    // ...