icingaweb2/library/Icinga/Authentication/RolesConfig.php

<?php
/* Icinga Web 2 | (c) 2019 Icinga GmbH | GPLv2+ */

namespace Icinga\Authentication;

use Icinga\Application\Icinga;
use Icinga\Repository\IniRepository;

class RolesConfig extends IniRepository
{
    protected $configs = [
        'roles' => [
            'name'      => 'roles',
            'keyColumn' => 'name'
        ]
    ];

    protected function initializeQueryColumns()
    {
        $columns = [
            'roles' => [
                'parent',
                'name',
                'users',
                'groups',
                'refusals',
                'permissions',
                'application/share/users',
                'application/share/groups'
            ]
        ];

        $moduleManager = Icinga::app()->getModuleManager();
        foreach ($moduleManager->listInstalledModules() as $moduleName) {
            foreach ($moduleManager->getModule($moduleName, false)->getProvidedRestrictions() as $restriction) {
                $columns['roles'][] = $restriction->name;
            }
        }

        return $columns;
    }
}