cakephp-tinyauth-backendDatabase-backed admin UI for TinyAuth

Manage CakePHP roles, public actions, controller/action ACL, resource permissions, and scopes from a self-contained admin backend — no INI files required.

Get Started

Strategies

Authorization

View on GitHub

🗃️

DB Instead of INI

Move classic TinyAuth allow and acl rules out of INI files and into the database via drop-in adapters — same runtime behavior, editable from a UI.

🧭

Admin UI

A self-contained Bootstrap-free, Tailwind-styled backend at /admin/auth for the ACL matrix, public actions, roles, resources, and scopes.

🪜

Four Usage Strategies

Climb a ladder from adapter-only DB storage to a full backend with role hierarchy, resources, scopes, and CakePHP Authorization integration.

🛡️

Fails Closed

The admin UI rejects every request with 403 until you configure an explicit access gate — regardless of debug mode. No accidental exposure.

🧩

Authorization Integration

Ship TinyAuthPolicy and TinyAuthResolver to drive entity-level checks through cakephp/authorization without per-resource policy wrappers.

🔗

External Role Sources

Drive role aliases from app config, a callback, a JWT claim, LDAP, or SSO while keeping ACL and resource assignments in the backend.