Web URL based authorization is only useful for very general, and broad
access checks. More fine grained access control should rely on
programmatic authorization, or use the SecurityExtraBundle
https://github.com/schmittjoh/SecurityExtraBundle.

Kind regards,
Johannes


On 10 Jan., 18:43, Dan Leech <[email protected]> wrote:
> > So in general, it is no longer safe to edit the routing table without
> > also editing controller and firewall code and settings. Unlike Symfony
> > 1.x, in Symfony 2.x routes, actions and the firewall are all tightly
> > coupled to the way the URL is written and all must usually be updated
> > if you want to change a URL.
>
> What if you have internationalized URLs? I havnt looked into the
> system much yet, but if you were to except variations on a URL route,
> e.g. `/home` and  `/accueil`, this would also cause some problems?
>
>  I am guessing that its possible to do this by extending the code but
> just thought I would mention it now.
>
> On 10 January 2011 13:53, Tom Boutell <[email protected]> wrote:
>
>
>
> > security.vote does not work for me either:
>
> >               {% if security.vote('ROLE_IS_AUTHENTICATED_FULLY') %}
> >                 <a href="{{ path('security_logout') }}">Logout</a>
> >               {% else %}
> >                 <a href="{{ path('security_login') }}">Login</a>
> >               {% endif %}
>
> > Yields:
>
> > Variable "security" does not exist in ::layout.twig line 12
>
> > I guess I could pass the security object explicitly in an action I call with
> > render, is that what you meant?
>
> > I have turned on the anonymous feature now.
>
> > --
> > If you want to report a vulnerability issue on symfony, please send it to
> > security at symfony-project.com
>
> > You received this message because you are subscribed to the Google
> > Groups "symfony developers" group.
> > To post to this group, send email to [email protected]
> > To unsubscribe from this group, send email to
> > [email protected]
> > For more options, visit this group at
> >http://groups.google.com/group/symfony-devs?hl=en
>
> --
> Dan Leech
>
> Web Developerwww.dantleech.com

-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en

Reply via email to