Permissions & Access Management UI

Just to make clear what I mean with “dynamic role” is something like this:

roles:
  'Passcreator.Passcreator:BasicUser':
    dynamicPrivilegeReader: 'Passcreator\Security\Foo\Bar'
    privileges:
      -
        privilegeTarget: LoginActions
        permission: GRANT

The “dynamicPrivilegeReader” (forget the name for now :wink: ) would then return an array of privileges (PrivilegeInterface) that will be dynamically added to the privileges defined in the Policy.yaml which means the Role DTO of Flow would need to call a function of the class specified as privilege reader.