You are browsing upcoming documentation for version 6.1 of OroCommerce, scheduled for release in 2025. Read the documentation for version 6.0 (the latest LTS version) to get up-to-date information.

See our Release Process documentation for more information on the currently supported and upcoming releases.


This attribute is used to protect a controller based on an existing access control list. The ID of the parent access control list is passed as the only argument:

// ...
use Oro\Bundle\SecurityBundle\Attribute\AclAncestor;

public function demoAction()
    // ...