bypass DebugKit urls in default permissions

CakeDC · Oct 30, 2023 · 24381ec · 24381ec
1 parent e3ce604
commit 24381ec
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 0 deletions.
diff --git a/config/permissions.php b/config/permissions.php
@@ -120,6 +120,13 @@
         'controller' => 'Pages',
         'action' => 'display',
     ],
+    [
+        'role' => '*',
+        'plugin' => 'DebugKit',
+        'controller' => '*',
+        'action' => '*',
+        'bypassAuth' => true,
+    ],
 ];
 
 $preload = \Cake\Core\Configure::read('CakeDC/Auth.preloadPermissions', []);

diff --git a/src/Rbac/Permissions/AbstractProvider.php b/src/Rbac/Permissions/AbstractProvider.php
@@ -114,6 +114,13 @@ public function __construct(array $config = [])
                 'controller' => 'Pages',
                 'action' => 'display',
             ],
+            [
+                'role' => '*',
+                'plugin' => 'DebugKit',
+                'controller' => '*',
+                'action' => '*',
+                'bypassAuth' => true,
+            ],
         ];
     }
 

diff --git a/tests/TestCase/Rbac/RbacTest.php b/tests/TestCase/Rbac/RbacTest.php
@@ -105,6 +105,13 @@ public function setUp(): void
                 'controller' => 'Pages',
                 'action' => 'display',
             ],
+            [
+                'role' => '*',
+                'plugin' => 'DebugKit',
+                'controller' => '*',
+                'action' => '*',
+                'bypassAuth' => true,
+            ],
         ];
         $this->rbac = new Rbac($this->defaultPermissions);
     }