Issue #3271172 by Anybody, Chandreshgiri Gauswami, nibo, Grevil: Ban the...

Issue #3271172 by Anybody, Chandreshgiri Gauswami, nibo, Grevil: Ban the Anonymous user requests, except the logged in user

perimeter.permissions.yml

+bypass perimeter defence rules:
+  title: 'Bypass Perimeter Defence ban rules'
+  description: 'Allow users to bypass the rules defined by Perimeter Defence module.'
+  restrict access: true

src/EventSubscriber/PerimeterSubscriber.php

@@ -40,6 +40,9 @@ class PerimeterSubscriber implements EventSubscriberInterface {
    * On page not found events, ban the IP if the request is suspicious.
    */
   public function handleBannedUrls(Event $event) {
+    if (\Drupal::currentUser()->hasPermission('bypass perimeter defence rules')) {
+      return;
+    }
     $exception = $event->getException();
     if ($exception instanceof NotFoundHttpException) {
       $request_path = $event->getRequest()->getPathInfo();