TinyAuth Backend 3.x is a full rewrite of the CakePHP ACL plugin, bringing database-backed, UI-managed permissions to modern CakePHP 5.1+ apps. It introduces a normalized 8-table schema, an HTMX+Alpine.js+Tailwind admin panel with role-permission matrix, auto-discovery sync for controllers and resources, INI import/export, composite adapters for gradual migration, and four incremental adoption strategies (AdapterOnly, FullBackend, NativeAuth, ExternalRoles). Roles can come from any source (DB, JWT, LDAP, SSO), and the plugin integrates cleanly with cakephp/authorization's policy layer without replacing it.
Table of contents
A normalized schema, eight tables deepA real admin UI, not a stale admin skinSync: permissions that keep up with your codeImport / export: a real upgrade pathKeeping the admin panel admin-onlyOnly the features you wantFlexible role sourcesFirst-class cakephp/authorization integrationSort: