@AclAncestor
This annotation is used to protect a controller based on an existing access control list. The ID of the parent access control list is passed as the only option:
// ...
use Oro\Bundle\SecurityBundle\Annotation\AclAncestor;
/**
* @AclAncestor("an_acl_id")
*/
public function demoAction()
{
// ...
}