<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/acl-is-back-in-cakephp-dereuromark-jbr1mrb1e" -->

---
title: ACL Is Back in CakePHP – DerEuroMark | daily.dev
description: TinyAuth Backend 3.x is a full rewrite of the CakePHP ACL plugin, bringing database-backed, UI-managed permissions to modern CakePHP 5.1+ apps. It introduces a...
canonical: https://daily.dev/posts/acl-is-back-in-cakephp-dereuromark-jbr1mrb1e
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: ACL Is Back in CakePHP – DerEuroMark | daily.dev
og:description: TinyAuth Backend 3.x is a full rewrite of the CakePHP ACL plugin, bringing database-backed, UI-managed permissions to modern CakePHP 5.1+ apps. It introduces a...
og:url: https://daily.dev/posts/acl-is-back-in-cakephp-dereuromark-jbr1mrb1e
og:image: https://api.daily.dev/og/posts/JbR1MRB1E.png
og:image:alt: ACL Is Back in CakePHP – DerEuroMark
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# ACL Is Back in CakePHP – DerEuroMark

**[DerEuroMark](https://daily.dev/sources/dereuromark)** · 13 min read · 0 upvotes · 0 comments

## Summary

TinyAuth Backend 3.x is a full rewrite of the CakePHP ACL plugin, bringing database-backed, UI-managed permissions to modern CakePHP 5.1+ apps. It introduces a normalized 8-table schema, an HTMX+Alpine.js+Tailwind admin panel with role-permission matrix, auto-discovery sync for controllers and resources, INI import/export, composite adapters for gradual migration, and four incremental adoption strategies (AdapterOnly, FullBackend, NativeAuth, ExternalRoles). Roles can come from any source (DB, JWT, LDAP, SSO), and the plugin integrates cleanly with cakephp/authorization's policy layer without replacing it.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.dereuromark.de/2026/04/27/acl-is-back-in-cakephp>

## Similar posts on daily.dev

- [CakePHP AuditStash 2.0: Beyond CRUD – DerEuroMark](https://daily.dev/posts/cakephp-auditstash-2-0-beyond-crud-dereuromark-bm1vxl2nd) · DerEuroMark · 3 upvotes · 0 comments
- [CakePHP 5.4 is around the corner – DerEuroMark](https://daily.dev/posts/cakephp-5-4-is-around-the-corner-dereuromark-ynzmlrpz0) · DerEuroMark · 2 upvotes · 3 comments
- [A powerful composable menu builder for CakePHP – DerEuroMark](https://daily.dev/posts/a-powerful-composable-menu-builder-for-cakephp-dereuromark-dm6rqck4v) · DerEuroMark · 0 upvotes · 0 comments

---

Tags: [#php](https://daily.dev/tags/php), [#authorization](https://daily.dev/tags/authorization)

[View this post on daily.dev](https://daily.dev/posts/acl-is-back-in-cakephp-dereuromark-jbr1mrb1e)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"ACL Is Back in CakePHP – DerEuroMark","url":"https://daily.dev/posts/acl-is-back-in-cakephp-dereuromark-jbr1mrb1e","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/acl-is-back-in-cakephp-dereuromark-jbr1mrb1e"},"datePublished":"2026-04-27T11:25:11.197Z","dateModified":"2026-04-27T11:25:34.890Z","description":"TinyAuth Backend 3.x is a full rewrite of the CakePHP ACL plugin, bringing database-backed, UI-managed permissions to modern CakePHP 5.1+ apps. It introduces a...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d4ead4ae107d418282aca80bece0b1b1?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d4ead4ae107d418282aca80bece0b1b1?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"DerEuroMark","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"DerEuroMark","logo":"https://media.daily.dev/image/upload/s--OwbYUam1--/f_auto,q_auto/v1772962015/logos/dereuromark","url":"https://daily.dev/sources/dereuromark"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/acl-is-back-in-cakephp-dereuromark-jbr1mrb1e","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"php,authorization","timeRequired":"PT13M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"DerEuroMark","item":"https://daily.dev/sources/dereuromark"},{"@type":"ListItem","position":3,"name":"ACL Is Back in CakePHP – DerEuroMark"}]}
```

