Add the ability to use a callback in bypassAuth in permissions

CakeDC · Sep 17, 2024 · 0aa5317 · 0aa5317
1 parent 91fede5
commit 0aa5317
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/Rbac/Rbac.php b/src/Rbac/Rbac.php
@@ -167,7 +167,11 @@ protected function _matchPermission(array $permission, $user, $role, ServerReque
             'action' => $params['action'] ?? null,
             'role' => $role,
         ];
-        if (!$user && ($permission['bypassAuth'] ?? false) !== true) {
+        $bypass = $permission['bypassAuth'] ?? false;
+        if (is_callable($bypass)) {
+            $bypass = $bypass($user, $role, $request);
+        }
+        if (!$user && $bypass !== true) {
             return null;
         }
         foreach ($permission as $key => $value) {