[Neos] Re: Front-end user groups

[Ardis Markss]

Hi Olle
I take it from Bastians link:

#                                                                        #
# Security policy for the TYPO3.NeosDemoTypo3Org package                 #
#                                                                        #

privilegeTargets:

  'TYPO3\Flow\Security\Authorization\Privilege\Method\MethodPrivilege':

    'TYPO3.NeosDemoTypo3Org:BackendRegistration':
      matcher: method(TYPO3\NeosDemoTypo3Org\Controller\RegistrationController->(index|newAccount|createAccount|createTemporaryAccount)Action())
    'TYPO3.NeosDemoTypo3Org:FlickrPlugin':
      matcher: method(TYPO3\NeosDemoTypo3Org\Controller\FlickrController->(tagStream|userStream)Action())
    'TYPO3.NeosDemoTypo3Org:FrontendLoginForm':
      matcher: 'method(TYPO3\Flow\Security\Authentication\Controller\AbstractAuthenticationController->(?<!initialize).*Action()) || method(TYPO3\NeosDemoTypo3Org\Controller\LoginController->(index|authenticate|logout)Action())'

  'TYPO3\TYPO3CR\Security\Authorization\Privilege\Node\ReadNodePrivilege':

    'TYPO3.NeosDemoTypo3Org:MembersArea':
      matcher: 'isDescendantNodeOf("/sites/neosdemotypo3org/members")'

roles:

  'TYPO3.Flow:Everybody':

    privileges:
      -
        privilegeTarget: 'TYPO3.NeosDemoTypo3Org:BackendRegistration'
        permission: GRANT
      -
        privilegeTarget: 'TYPO3.NeosDemoTypo3Org:FlickrPlugin'
        permission: GRANT
      -
        privilegeTarget: 'TYPO3.NeosDemoTypo3Org:FrontendLoginForm'
        permission: GRANT

  'TYPO3.NeosDemoTypo3Org:Member':

    privileges:
      -
        privilegeTarget: 'TYPO3.NeosDemoTypo3Org:MembersArea'
        permission: GRANT


  # Grant neos backend users access to the members area - otherwise the affected nodes would be hidden in backend too!
  'TYPO3.Neos:Editor':

    privileges:
      -
        privilegeTarget: 'TYPO3.NeosDemoTypo3Org:MembersArea'
        permission: GRANT


With best regards
Ardis