ACL deny, then grant not working as expected. about acl HOT 9 OPEN

Trying to grant access to an aco when it has already been denied at least once does not work. I encountered this problem when trying to grant my administrative users access to a particular aco that I had denied previously.

Hmm, I couldn't reproduce the issue in Croogo (it uses the same plugin). Eg:

This would say Permission granted, but wouldn't actually work:
$ bin/cake acl grant Groups.1 controllers/manage/Tracks/index

When you say "wouldn't actually work", are you saying that accessing the action from browser didn't work or using bin/cake acl check says not allowed?

If still denied from browser, tt maybe related to cache or cookie, so clear you cache/cookie and retry.

from acl.

@rchavik Ah, I wasn't testing access using check. I was testing access by refreshing the browser (ctrl+shift+r, force refresh, do not use cached data in Chrome). I don't think this was a caching issue.

from acl.

Can you double check your Acl component is not configured using CachedDbAcl adapter?

from acl.

@rchavik sorry, where do I check this setting? Thanks.

from acl.

It's configured via Acl.classname config key. (defaults to DbAcl when not configured)

from acl.

This is whats in my AppController.

public $components = [
        'Acl' => [
            'className' => 'Acl.Acl'
        ]
    ];

I'm not sure if its worth mentioning, but I have multiple AppControllers (for an API, and a management section), all with the above $components variable set to the same.

from acl.

No, the setting we need to check is Configure::write('Acl.classname', ...);

What is the output of bin/cake/acl check after you re-add the grant?

from acl.

/vendor/cakephp/acl/config/bootstrap.php:
   15: if (!Configure::read('Acl.classname')) {
   16:     Configure::write('Acl.classname', 'DbAcl');

This what you want? That is the default config, I haven't changed anything out of the box.

from acl.

Yes. So it's probably set using the default.

Hmm. I can't think of anything else. I'll try to repro using a clean cake app when I have time. No promises though

from acl.