About this talk
This talk presents the new Access Policy API introduced in Drupal, focusing on enhancing how permissions are managed within the platform. The speaker discusses the transition from Role and Attribute Based Access Control (RBAC and ABAC) to a more robust Policy Based Access Control (PBAC) model, allowing permissions to be determined by various factors such as time, location, or user attributes. Attendees will gain insights into the API's structure, including the access policy processor and permission checker, as well as the new VariationCache introduced in Drupal 10.2. This session is aimed at advanced users with a foundational understanding of access management in Drupal core.
