In hindsight, I think my trouble might actually be with RoleVoter::vote(), which will return in the affirmative once the first role is possessed. The decision manager has nothing to do with it, so Johannes' suggestion of creating a custom voter does seem necessary.
If the default strategy is "affirmative" (only one affirmative voter required), I think the strategy (if even app-wide) would still need to be changed; otherwise the default voter will not even give my "all roles" voter a chance to vote. -- jeremy mikola -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/symfony-devs?hl=en
