Hm, that bit looks ok so the problem must be somewhere else.
Here is my security.yml and the route definitions I'm using:

security:
    encoders:
        Symfony\Component\Security\Core\User\User:
            algorithm: sha1
            encode-as-base64: false
            iterations: 1

    role_hierarchy:
        ROLE_ADMIN:       ROLE_USER
        ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]

    providers:
        in_memory:
            users:
                admin: { password: 9af2785afcfdd303af47fa698c6000fb731a772d, 
roles: [ 'ROLE_ADMIN' ] }

    firewalls:
        profiler:
            pattern:  ^/_profiler
            security: false

        wdt:
            pattern:  ^/_wdt
            security: false

        main:
            pattern:  ^/
            form_login:
                check_path: /login_check
                login_path: /login
            logout:
                path:   /logout
                target: /login
            anonymous: true

    access_control:
        - { path: /login.*, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: /.*, roles: ROLE_USER }

and the routes:

_security_login:
    pattern:  /login
    defaults: { _controller: ConversisDamBundle:System:login }

_security_check:
    pattern:  /login_check
    defaults: { _controller: ConversisDamBundle:System:login }

_security_logout:
    pattern:  /logout

regards,
  Dennis

-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en

Reply via email to