Access Policy API in Drupal Core - From RBAC to Policy Based Access Control

Learn about the powerful new Access Policy API in Drupal core through this advanced-level conference talk from DrupalCon Pittsburgh 2023. Discover how to implement Policy Based Access Control (PBAC) to replace traditional Role and Attribute Based Access Control systems, enabling dynamic permission management based on various contextual factors like time, location, user attributes, and more. Gain deep insights into key components including the access policy processor, permission checker, and calculated permissions value object, while exploring supporting features like VariationCache in Drupal 10.2. Master the implementation of custom access policies to create sophisticated permission rules, such as restricting work hours access or modifying administrator privileges. Requires foundational knowledge of Drupal core access mechanisms, permission checks, and entity access concepts.