RolesAuditBranchScopeCommand
extends Command
in package
Find inert role grants: active member-role assignments with no branch scope on roles that carry branch-scoped permissions.
PermissionsLoader resolves branch-scoped permissions through the assignment's branch, so a branchless grant of such a role silently confers nothing — the member looks assigned everywhere in the UI but every permission check fails.
Usage:
bin/cake roles_audit_branch_scope # report inert grants
bin/cake roles_audit_branch_scope --fix-branch
Table of Contents
Methods
- defaultName() : string
- execute() : int
- buildOptionParser() : ConsoleOptionParser
Methods
defaultName()
public
static defaultName() : string
Tags
Return values
stringexecute()
public
execute(Arguments $args, ConsoleIo $io) : int
Parameters
- $args : Arguments
- $io : ConsoleIo
Tags
Return values
intbuildOptionParser()
protected
buildOptionParser(ConsoleOptionParser $parser) : ConsoleOptionParser
Parameters
- $parser : ConsoleOptionParser