Please see:

http://docs.symfony-reloaded.org/master/guides/security/users.html

These seem to be backwards:

isAccountNonExpired(): Returns true when the user’s account has expired;
isAccountNonLocked(): Returns true when the user is locked;
isCredentialsNonExpired(): Returns true when the user’s credentials
(password) has expired;

The "non" suggests that the idea is to always return true when things
are kosher, false when they are not so good (:

The built in security mechanisms in 2.0 are quite impressive so far

-- 
Tom Boutell
P'unk Avenue
215 755 1330
punkave.com
window.punkave.com

-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en

Reply via email to