[Bug] Clear cached permission definitions on cache:clear

config/security.yaml

@@ -13,6 +13,10 @@ services:
     tags:
       - { name: security.voter }
 
+  Pimcore\Bundle\StudioBackendBundle\Security\CacheClearer\UserPermissionCacheClearer:
+    tags:
+      - { name: kernel.cache_clearer }
+
   Pimcore\Bundle\StudioBackendBundle\Security\Voter\HasOneOfUserPermissionVoter:
     tags:
       - { name: security.voter }

src/Security/CacheClearer/UserPermissionCacheClearer.php

@@ -0,0 +1,38 @@
+<?php
+declare(strict_types=1);
+
+/**
+ * This source file is available under the terms of the
+ * Pimcore Open Core License (POCL)
+ * Full copyright and license information is available in
+ * LICENSE.md which is distributed with this source code.
+ *
+ *  @copyright  Copyright (c) Pimcore GmbH (https://www.pimcore.com)
+ *  @license    Pimcore Open Core License (POCL)
+ */
+
+namespace Pimcore\Bundle\StudioBackendBundle\Security\CacheClearer;
+
+use Pimcore\Bundle\StaticResolverBundle\Lib\CacheResolverInterface;
+use Pimcore\Bundle\StudioBackendBundle\Util\Constant\CacheKeys;
+use Symfony\Component\HttpKernel\CacheClearer\CacheClearerInterface;
+
+/**
+ * Drops the cached list of permission definitions on cache:clear, which also runs after
+ * pimcore:bundle:install, so permissions created by a bundle installer are picked up
+ * by the UserPermissionVoter.
+ *
+ * @internal
+ */
+final readonly class UserPermissionCacheClearer implements CacheClearerInterface
+{
+    public function __construct(
+        private CacheResolverInterface $cacheResolver
+    ) {
+    }
+
+    public function clear(string $cacheDir): void
+    {
+        $this->cacheResolver->remove(CacheKeys::USER_PERMISSIONS->value);
+    }
+}

tests/Unit/Security/CacheClearer/UserPermissionCacheClearerTest.php

@@ -0,0 +1,35 @@
+<?php
+declare(strict_types=1);
+
+/**
+ * This source file is available under the terms of the
+ * Pimcore Open Core License (POCL)
+ * Full copyright and license information is available in
+ * LICENSE.md which is distributed with this source code.
+ *
+ *  @copyright  Copyright (c) Pimcore GmbH (https://www.pimcore.com)
+ *  @license    Pimcore Open Core License (POCL)
+ */
+
+namespace Pimcore\Bundle\StudioBackendBundle\Tests\Unit\Security\CacheClearer;
+
+use Codeception\Test\Unit;
+use Pimcore\Bundle\StaticResolverBundle\Lib\CacheResolverInterface;
+use Pimcore\Bundle\StudioBackendBundle\Security\CacheClearer\UserPermissionCacheClearer;
+use Pimcore\Bundle\StudioBackendBundle\Util\Constant\CacheKeys;
+
+/**
+ * @internal
+ */
+final class UserPermissionCacheClearerTest extends Unit
+{
+    public function testClearRemovesTheCachedPermissionDefinitions(): void
+    {
+        $cacheResolver = $this->createMock(CacheResolverInterface::class);
+        $cacheResolver->expects($this->once())
+            ->method('remove')
+            ->with(CacheKeys::USER_PERMISSIONS->value);
+
+        (new UserPermissionCacheClearer($cacheResolver))->clear('/tmp/cache');
+    }
+}