Merge pull request #92 from flohdez/9.next-cake4

Add the ability to use a callback in bypassAuth in permissions

Author: rochamarcelo

src/Rbac/Rbac.php

@@ -168,7 +168,11 @@ protected function _matchPermission(array $permission, $user, $role, ServerReque
             'action' => $params['action'] ?? null,
             'role' => $role,
         ];
-        if (!$user && ($permission['bypassAuth'] ?? false) !== true) {
+        $bypass = $permission['bypassAuth'] ?? false;
+        if (is_callable($bypass)) {
+            $bypass = $bypass($user, $role, $request);
+        }
+        if (!$user && $bypass !== true) {
             return null;
         }
         foreach ($permission as $key => $value) {