Transform and persist permissions passed as params from controller

lib/hyrax/transactions/steps/save_access_control.rb

@@ -16,13 +16,27 @@ class SaveAccessControl
         # @param [Valkyrie::Resource] obj
         #
         # @return [Dry::Monads::Result]
-        def call(obj)
+        def call(obj, permissions_params: [])
           return Success(obj) unless obj.respond_to?(:permission_manager)
+
           acl = obj.permission_manager&.acl
+          # Translate step args into Hyrax::Permission objects before saving
+          Array(permissions_params).each do |param|
+            acl << param_to_permission(obj, param)
+          end
+
           acl&.save || (return Failure[:failed_to_save_acl, acl])
 
           Success(obj)
         end
+
+        private
+
+        def param_to_permission(obj, param)
+          mode = param["access"].to_sym
+          agent = param["type"] == "group" ? "group/#{param['name']}" : param["name"]
+          Hyrax::Permission.new(access_to: obj.id, mode: mode, agent: agent)
+        end
       end
     end
   end

spec/hyrax/transactions/steps/save_access_control_spec.rb

@@ -31,6 +31,18 @@
         expect(result.failure).to contain_exactly(Symbol, Hyrax::AccessControlList)
       end
     end
+
+    context 'when permissions params are passed' do
+      let(:params) { [{ "access" => "read", "type" => "group", "name" => "admin" }, { "access" => "edit", "type" => "person", "name" => user.user_key }] }
+
+      it 'transforms and persists the params' do
+        expect { step.call(work, permissions_params: params) }
+          .to change { Hyrax::AccessControlList.new(resource: work).permissions }
+          .to contain_exactly(have_attributes(mode: :read, agent: user.user_key),
+                                    have_attributes(mode: :edit, agent: user.user_key),
+                                    have_attributes(mode: :read, agent: 'group/admin'))
+      end
+    end
   end
 
   context 'when the resource has no permission_manager' do