Security

OroSecurityBundle extends Symfony security capabilities to enable a role-based ACL security system in the Oro applications.

Developers can set up access restrictions for entities and non-entity-related actions using DOC-block annotations and YAML configuration files.

Application administrators get a UI to configure entity-specific permissions for particular user roles based on entity ownership.

Read more in the following topics:

• Introduction to Security in Oro Applications

  • Access Control Lists

  • Permissions for Entities

  • Protecting Resources

  • Role Based Access Control

• Access Levels and Ownership Illustration

• OroSecurityBundle Features

  • ACL Manager

  • Field ACL

  • Custom Listeners

  • Access Rules

  • HTTP Security Response Headers

• Custom and Configurable Permissions

  • How to Configure and Apply Custom Permissions to an Entity

  • How to Work with Configurable Permissions

• Global View Entities

• Security Response Headers