Hm, that bit looks ok so the problem must be somewhere else. Here is my security.yml and the route definitions I'm using:
security: encoders: Symfony\Component\Security\Core\User\User: algorithm: sha1 encode-as-base64: false iterations: 1 role_hierarchy: ROLE_ADMIN: ROLE_USER ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH] providers: in_memory: users: admin: { password: 9af2785afcfdd303af47fa698c6000fb731a772d, roles: [ 'ROLE_ADMIN' ] } firewalls: profiler: pattern: ^/_profiler security: false wdt: pattern: ^/_wdt security: false main: pattern: ^/ form_login: check_path: /login_check login_path: /login logout: path: /logout target: /login anonymous: true access_control: - { path: /login.*, roles: IS_AUTHENTICATED_ANONYMOUSLY } - { path: /.*, roles: ROLE_USER } and the routes: _security_login: pattern: /login defaults: { _controller: ConversisDamBundle:System:login } _security_check: pattern: /login_check defaults: { _controller: ConversisDamBundle:System:login } _security_logout: pattern: /logout regards, Dennis -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en