ENGCOM-3995: Granular Magento_Customer ACL #20436

 - Merge Pull Request #20436 from kassner/magento2:patch-13
 - Merged commits:
   1. 3cd2be1
   2. 4dee7d2
   3. f87179b

Author: magento-engcom-team

app/code/Magento/Customer/Block/Adminhtml/Edit/DeleteButton.php

@@ -53,6 +53,7 @@ public function getButtonData()
                 ],
                 'on_click' => '',
                 'sort_order' => 20,
+                'aclResource' => 'Magento_Customer::delete',
             ];
         }
         return $data;

app/code/Magento/Customer/Block/Adminhtml/Edit/InvalidateTokenButton.php

@@ -27,6 +27,7 @@ public function getButtonData()
                 'class' => 'invalidate-token',
                 'on_click' => 'deleteConfirm("' . $deleteConfirmMsg . '", "' . $this->getInvalidateTokenUrl() . '")',
                 'sort_order' => 65,
+                'aclResource' => 'Magento_Customer::invalidate_tokens',
             ];
         }
         return $data;

app/code/Magento/Customer/Block/Adminhtml/Edit/ResetPasswordButton.php

@@ -27,6 +27,7 @@ public function getButtonData()
                 'class' => 'reset reset-password',
                 'on_click' => sprintf("location.href = '%s';", $this->getResetPasswordUrl()),
                 'sort_order' => 60,
+                'aclResource' => 'Magento_Customer::reset_password',
             ];
         }
         return $data;

app/code/Magento/Customer/Controller/Adminhtml/Customer/InvalidateToken.php

@@ -27,6 +27,13 @@
  */
 class InvalidateToken extends \Magento\Customer\Controller\Adminhtml\Index
 {
+    /**
+     * Authorization level of a basic admin session
+     *
+     * @see _isAllowed()
+     */
+    const ADMIN_RESOURCE = 'Magento_Customer::invalidate_tokens';
+
     /**
      * @var CustomerTokenServiceInterface
      */

app/code/Magento/Customer/Controller/Adminhtml/Index/Delete.php

@@ -10,6 +10,13 @@
 
 class Delete extends \Magento\Customer\Controller\Adminhtml\Index implements HttpPostActionInterface
 {
+    /**
+     * Authorization level of a basic admin session
+     *
+     * @see _isAllowed()
+     */
+    const ADMIN_RESOURCE = 'Magento_Customer::delete';
+
     /**
      * Delete customer action
      *

app/code/Magento/Customer/Controller/Adminhtml/Index/MassDelete.php

@@ -18,6 +18,13 @@
  */
 class MassDelete extends AbstractMassAction implements HttpPostActionInterface
 {
+    /**
+     * Authorization level of a basic admin session
+     *
+     * @see _isAllowed()
+     */
+    const ADMIN_RESOURCE = 'Magento_Customer::delete';
+
     /**
      * @var CustomerRepositoryInterface
      */

app/code/Magento/Customer/Controller/Adminhtml/Index/ResetPassword.php

@@ -16,6 +16,13 @@
  */
 class ResetPassword extends \Magento\Customer\Controller\Adminhtml\Index implements HttpGetActionInterface
 {
+    /**
+     * Authorization level of a basic admin session
+     *
+     * @see _isAllowed()
+     */
+    const ADMIN_RESOURCE = 'Magento_Customer::reset_password';
+
     /**
      * Reset password handler
      *

app/code/Magento/Customer/etc/acl.xml

@@ -10,7 +10,13 @@
         <resources>
             <resource id="Magento_Backend::admin">
                 <resource id="Magento_Customer::customer" title="Customers" translate="title" sortOrder="40">
-                    <resource id="Magento_Customer::manage" title="All Customers" translate="title" sortOrder="10" />
+                    <resource id="Magento_Customer::manage" title="All Customers" translate="title" sortOrder="10">
+                        <resource id="Magento_Customer::actions" title="Actions" translate="title" sortOrder="10">
+                            <resource id="Magento_Customer::delete" title="Delete" translate="title" sortOrder="10" />
+                            <resource id="Magento_Customer::reset_password" title="Reset password" translate="title" sortOrder="20" />
+                            <resource id="Magento_Customer::invalidate_tokens" title="Invalidate tokens" translate="title" sortOrder="30" />
+                        </resource>
+                    </resource>
                     <resource id="Magento_Customer::online" title="Now Online" translate="title" sortOrder="20" />
                     <resource id="Magento_Customer::group" title="Customer Groups" translate="title" sortOrder="30" />
                 </resource>