Flow: Policy to disallow everything except the LoginController

Policy.yaml

#                                                                        #
# Security policy for the TYPO3 package                                  #
#                                                                        #

resources:
  methods:
    ADU: 'method(Famelo\ADU\(?!.*Login).*->.*())'

roles:
  Administrator: [ Editor ]
  Editor: []

acls:
  Editor:
    methods:
      ADU: GRANT