Multi-site access restriction with Neos CMS

composer.json

{
  "repositories": [
    {
      "type": "git",
      "url": "https://github.com/bwaidelich/Wwwision.AssetConstraints"
    }
  ],
  "require": {
    "wwwision/assetconstraints": "~0.5.0"
  }
}

Policy.yaml

privilegeTargets:

  'Wwwision\AssetConstraints\Security\Authorization\Privilege\ReadAssetPrivilege':
    'Acme.Package:Assets.Alpha':
      matcher: 'isInCollection("Alpha")'

    'Acme.Package:Assets.Beta':
      matcher: 'isInCollection("Beta")'

  'Wwwision\AssetConstraints\Security\Authorization\Privilege\ReadAssetCollectionPrivilege':
    'Acme.Package:AssetCollection.Alpha':
      matcher: 'isTitled("Alpha")'

    'Acme.Package:AssetCollection.Beta':
      matcher: 'isTitled("Beta")'

roles:
  'Neos.Flow:Anonymous':
    privileges:
      -
        privilegeTarget: 'Acme.Package:Assets.Alpha'
        permission: GRANT
      -
        privilegeTarget: 'Acme.Package:Assets.Beta'
        permission: GRANT

  'Neos.Neos:Administrator':
    privileges:
      -
        privilegeTarget: 'Acme.Package:Assets.Alpha'
        permission: GRANT
      -
        privilegeTarget: 'Acme.Package:AssetCollection.Alpha'
        permission: GRANT
      -
        privilegeTarget: 'Acme.Package:Assets.Beta'
        permission: GRANT
      -
        privilegeTarget: 'Acme.Package:AssetCollection.Beta'
        permission: GRANT
      
  'Acme.Package:Alpha':
    privileges:
    -
      privilegeTarget: 'Acme.Package:Assets.Alpha'
      permission: GRANT
    -
      privilegeTarget: 'Acme.Package:AssetCollection.Alpha'
      permission: GRANT
        
  'Acme.Package:Beta':
    privileges:
    -
      privilegeTarget: 'Acme.Package:Assets.Beta'
      permission: GRANT
    -
      privilegeTarget: 'Acme.Package:AssetCollection.Beta'
      permission: GRANT