Hello, I have followed the code for register an permission, save it to group with action, and test it with an user from this group, I can't got working action :
it works because the 'other' action is not in the list, but for \Auth::has_access('admin.list[delete]') it should not access because user group is setup for only list and add actions.
You're not testing with the admin user that is created by default? Because that has superadmin access by default, so has_access() already returns true.
To check the effective permissions, do a Debug::dump() of a Cache::get() of the users permissions. It should return an array with 3 elements: the first being the assigned permissions, the second the revoked permissions, and the third is the superadmin boolean. If that is true, has_access is always true.