The document discusses the development of a Content Management System (CMS) for ambitious editors based on the TYPO3 Flow framework. It outlines security features, roles, and privileges related to content editing, along with YAML configuration examples for content types. Additionally, it emphasizes the flexible content structure, modern rendering stack, and the potential for community engagement through workshops.

2. building a CMS for
ambitious editors

3. history

4. born under
the TYPO3 umbrella

5. goals

6. foundation

7. FLOW
full stack PHP framework

8. yet an other framework

9. convention over
configuration

10. security framework

11. privilegeTargets:
'TYPO3FlowSecurityAuthorizationPrivilegeMethodMethodPrivilege':
'Acme.MyPackage:RestrictedController.customerAction':
matcher: 'method(AcmeMyPackageControllerRestrictedController->
customerAction())'
'Acme.MyPackage:RestrictedController.adminAction':
matcher: 'method(AcmeMyPackageControllerRestrictedController->
(admin|drop)Action())’
'Acme.MyPackage:editOwnPost':
matcher: ‘method(AcmeMyPackageControllerPostController->
editAction(post.owner == current.userService.currentUser))'

12. roles:
'Acme.MyPackage:Customer':
privileges:
-
privilegeTarget: 'Acme.MyPackage:RestrictedController.customerAction'
permission: GRANT
-
privilegeTarget: 'Acme.MyPackage:RestrictedController.adminAction'
permission: GRANT
-
privilegeTarget: 'Acme.MyPackage:RestrictedController.editOwnPost'
permission: GRANT
'Acme.MyPackage:Customer':
privileges:
-
privilegeTarget: 'Acme.MyPackage:RestrictedController.customerAction'
permission: GRANT
'Acme.MyPackage:PrivilegedCustomer':
parentRoles: ['Acme.MyPackage:Customer']
privileges:
-
privilegeTarget: 'Acme.MyPackage:RestrictedController.editOwnPost'
permission: GRANT

13. security CLI helpers

14. $ ./flow security:showunprotectedactions
TYPO3NeosControllerBackendContentController
initializeUploadAssetAction
initializeCreateImageVariantAction
TYPO3NeosControllerLoginController
initializeIndexAction
TYPO3NeosControllerServiceWorkspacesController
initializeUpdateAction
TtreeCloudButlerControllerJobController
initializeRegisterAction

15. AOP

16. help with single
responsibility principle

17. danger zone

18. We compile your code

19. Powerful Reflection API

20. @FlowCompileStatic

21. /**
* Returns a map of action method names and their parameters.
*
* @param TYPO3FlowObjectObjectManagerInterface $objectManager
* @return array Array of method parameters by action name
* @FlowCompileStatic
*/
static public function getActionMethodParameters($objectManager) {
$reflectionService = $objectManager->get(
'TYPO3FlowReflectionReflectionService');
$className = get_called_class();
$methodParameters = $reflectionService->getMethodParameters($className,
get_class_methods($className));
foreach ($methodParameters as $parameterName => $parameterInfo) {
...
}
return $methodParameters;
}

22. NEOS is just a package

23. NEOS Content Repository

24. where content lives

25. yaml configuration

26. 'My.Package:SpecialHeadline':
superTypes:
'TYPO3.Neos:Content': true
ui:
label: 'Special Headline'
group: 'general'
properties:
headline:
type: 'string'
defaultValue: 'My Headline Default'
ui:
inlineEditable: true
validation:
'TYPO3.Neos/Validation/StringLengthValidator':
minimum: 1
maximum: 255

27. inspired by PHPCR

28. editing content

29. editor experience

35. workspace

39. content dimensions

41. contents lives
in multiple contexts

43. WYSIFTW

47. developer

48. don’t hide features

49. create values

50. flexible content structure

51. modern rendering stack

52. fusion

53. prototype(Vendor:Staff) < prototype(TYPO3.Neos:Content) {
templatePath = ‘resource://Vendor.Site/Private/Templates/ElementName.html'
headline = ${q(node).property('headline')}
subheadline = ${q(node).property('subheadline')}
text = ${q(node).property('text')}
image = ${q(node).property('image')}
}

54. prototype(Vendor:Staff) < prototype(TYPO3.Neos:Content) {
templatePath = ‘resource://Vendor.Site/Private/Templates/ElementName.html'
headline = ${q(node).property('headline')}
subheadline = ${q(node).property('subheadline')}
text = ${q(node).property('text')}
image = ${q(node).property(‘image’)}
staffIdentifier = ${q(node).property(‘staffIdentifier’)}
staffIdentifier.@process.callErp = ${ErpApi.getStaffDetails(value)}
}

55. prototype(Vendor:YourTwoColumns) {
prototype(Vendor:Staff) {
templatePath = ‘resource://Vendor.Site/Private/Templates/Compact.html'
}
}
prototype(Vendor:StaffDirectory.Document) {
prototype(Vendor:Staff) {
templatePath = ‘resource://Vendor.Site/Private/Templates/Square.html'
staffPageLink = ${q(node).property(‘staffIdentifier’)}
staffPageLink.@process.callErp = ${ErpApi.getStaffUri(value)}
}
}

56. prototype(Vendor:StaffListing) < prototype(Flowpack.Listable:Listable) {
@context.limit = 10
collection = ${q(site).find('[instanceof Vendor:Staff]’).get()}
itemRenderer = ‘Vendor:StaffListingItem'
}
prototype(Vendor:StaffListingItem) < prototype(Vendor:Staff) {
templatePath = ‘resource://Vendor.Site/Private/Templates/ListingItem.html'
}

57. cache on steroid

58. prototype(Vendor:StaffListingItem) {
@cache {
mode = 'cached'
maximumLifetime = '86400'
entryIdentifier {
node = ${node}
}
entryTags {
1 = ${'Node_' + documentNode.identifier}
}
}
}

59. much much more
open to organize a workshop to build
something on top of NEOS

60. from the lab

62. CQRS
for the content repository

63. touch points

64. neos.io

67. hello@ttree.ch - @ttreeagency - github.com/ttreeagency
tt ttree
digital beans