Hi,

That sounds logical, all the login configuration is now listed under the
main firewall and there are no other firewalls. I also created an access map
rule for anonymous users for the login page as both you and the master docs
suggest. It did not solve or change the situation and the weird php notice
about a nonexistent "id" field returned from __sleep() also still exists.

I have var_dumped the array which is serialized in
Security\Authentication\Token\Token.php on line 189. The first six fields in
the Artist entity (from first_name to gender) belong to the Artist class
which is child, and the following rows (from id to end of array) belong to
the parent Account class which is inherited using JOINED inheritance.

array
 0 =>
   object(Application\ArtistBundle\Entity\Artist)[200]
     protected 'first_name' => string 'op' (length=2)
     protected 'last_name' => string 'imago' (length=5)
     protected 'is_seeker' => boolean true
     protected 'is_student' => boolean true
     protected 'is_employed' => boolean true
     protected 'gender' => int 2
     protected 'id' => int 14
     protected 'email' => string '[email protected]' (length=22)
     protected 'password' => string 'a08354645f796101c5d3afe6d6a46c38'
(length=32)
     protected 'allow_comments' => boolean true
     protected 'allow_contacts' => boolean true
     protected 'is_active' => boolean true
     protected 'is_moderator' => boolean false
     protected 'avatar_id' => null
     protected 'category' =>
       object(Proxies\ApplicationCategoryBundleEntityCategoryProxy)[236]
         private '_entityPersister' =>
           object(Doctrine\ORM\Persisters\BasicEntityPersister)[238]
             ...
         private '_identifier' =>
           array
             ...
         public '__isInitialized__' => boolean false
         protected 'childrenRefs' =>
           array
             ...
         protected 'parentRef' => null
         private 'id' => null
         protected 'name' => null
         protected 'parent_id' => null
     protected 'location_finland' =>

 object(Proxies\ApplicationLocationBundleEntityLocationFinlandProxy)[251]
         private '_entityPersister' =>
           object(Doctrine\ORM\Persisters\BasicEntityPersister)[253]
             ...
         private '_identifier' =>
           array
             ...
         public '__isInitialized__' => boolean false
         private 'id' => null
         protected 'name' => null
         protected 'longitude' => null
         protected 'latitude' => null
     protected 'other_location' => null
     protected 'description' => string '<p>taivas fallinae calibu taivas
navila calibu keen dorothema trenol agas taivas meeblo was unetian lain
kolibacria cantalism milalei lord oposseratum</p>' (length=154)
     protected 'website' => string 'www.taidehuone.fi' (length=17)
     protected 'facebook' => string 'artist13' (length=8)
     protected 'twitter' => string 'artist13' (length=8)
     protected 'created_at' =>
       object(DateTime)[177]
         public 'date' => string '2011-01-17 18:40:07' (length=19)
         public 'timezone_type' => int 3
         public 'timezone' => string 'Europe/Helsinki' (length=15)
     protected 'updated_at' =>
       object(DateTime)[202]
         public 'date' => string '2011-01-17 18:40:07' (length=19)
         public 'timezone_type' => int 3
         public 'timezone' => string 'Europe/Helsinki' (length=15)
     protected 'ip_address' => string 'deadbeef' (length=8)
     protected 'phone' => null
     protected 'street_address' => null
     protected 'zip' => null
 1 => string 'taidehuone' (length=10)
 2 => boolean true
 3 =>
   array
     0 =>
       object(Symfony\Component\Security\Role\Role)[249]
         protected 'role' => string 'IS_AUTHENTICATED_FULLY' (length=22)
 4 => boolean false

Thanks for any tips in advance,
Jaakko R


On Fri, Jan 21, 2011 at 11:08 AM, stof <[email protected]> wrote:
>
> The login check has to be done by the main firewall as they don't share
> the context any more. Not sure if it is the issue here but it can be.
>
> As you also use anonymous users the simpliest configuration is to use only
> the main firewall and to let anonymous users access /login with the
> access_control map.

-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en

Reply via email to