library akeneo-import-export-acl

balance/akeneo-import-export-acl

Import / Export ACL Bundle

Import / Export ACL Bundle

Background

Akeneo have quite flexible settings to configure access level (ACL) to various entities like categories, attributes groups, locales. Frontend is covered fully with this functionality, however, import/export functionality doesn't take into account ACL configuration, _(*1)

As a result any user is able to export/import any data even without having access to it., _(*2)

Also, a user's access to a product is based on the user's access to the categories the product is assigned to (eg. Category ACL configuration). It means that you can view/edit products only if you have access to a specific category., _(*3)

However, products not assigned to any category are accessible for every user. We are thinking that a product shouldn't be without category, as then there is not way to define the owner of the product., _(*4)

Solution

We have implemented ACL support for Import product connector (v1) We have added two settings (widely) to a product import profile, _(*5)

1. Allow import of products which are not associated with any category (the setting described above)
2. Allow import partial data
   • skip import of attributes where user does not have access
   • skip attributes which do not exist
   • skip import locale where user does not have access
   • skip import products where user does not have access to category (checking both sides, current category in PIM and category in import file)

Appropriate notifications have been added, like:, _(*6)

• user does not have rights to edit the product
• user does not have rights to edit attributes (list)
• category must be filled

The implemented functionality cover missing ACL part for product import, _(*7)

Roadmap

• implement the same approach for export and quick export
• implement ACL support for other import/export connectors like associations

Usage for Enterprise and Community versions

Enterprise

• All functionality above is usable for Enterprise edition

Community

• Community version doesn't have ACL, so the whole permissinons settings/functionality has no use
• Setting "Allow import products which not accosiated with any category" - will be definately used for the Community edition
• Setting "Allow import partial data" (skip attributes, which don't exist) - will be definately used for the Community edition as it gives possibility to use import files with unknown columns(attributes) for Akeneo, currently the user should cut off all columns which doesn't exist in Akeneo, otherwise the import will fall

Installation

Step 1. Use as dependency in composer, _(*8)

composer require balance/akeneo-import-export-acl

Step 2. Add 3 lines into <path_to_akeneo>/app/AppKernel.php, into function registerBundles, _(*9)

$bundles[] = new Balance\Bundle\ConnectorBundle\BalanceConnectorBundle();, _(*10)

$bundles[] = new Balance\Bundle\CatalogBundle\BalanceCatalogBundle();, _(*11)

$bundles[] = new Balance\Bundle\SecurityBundle\BalanceSecurityBundle();, _(*12)

Step 3. Clear cache, execute the command: php console cache:clear --env=prod, _(*13)

Step 4. Fix folder rights, if so: chmod 777 app/cache -R, _(*14)

Step 5. Enjoy!, _(*15)

Test Cases

4 Test cases have been documented with Test import data., _(*16)

• Test Case 1
• Test Case 2
• Test Case 3
• Test Case 4