Policy.yaml

privilegeTargets:

  'Neos\Flow\Security\Authorization\Privilege\Method\MethodPrivilege':

    'Sandstorm.NeosTwoFactorAuthentication:LoginWithSecondFactor':
      matcher: 'method(Sandstorm\NeosTwoFactorAuthentication\Controller\LoginController->(.*)Action())'

    'Sandstorm.NeosTwoFactorAuthentication:BackendModule':
      matcher: 'method(Sandstorm\NeosTwoFactorAuthentication\Controller\BackendController->(.*)Action())'

roles:
  'Neos.Neos:AbstractEditor':
    privileges:
      -
        privilegeTarget: 'Sandstorm.NeosTwoFactorAuthentication:LoginWithSecondFactor'
        permission: GRANT
      -
        privilegeTarget: 'Sandstorm.NeosTwoFactorAuthentication:BackendModule'
        permission: GRANT

  'Neos.Neos:Administrator':
    privileges:
      -
        privilegeTarget: 'Sandstorm.NeosTwoFactorAuthentication:BackendModule'
        permission: GRANT