From dd04a2ed9b46c6e8f56acf186ca61b68b5ed54df Mon Sep 17 00:00:00 2001 From: Matt Farmer Date: Mon, 22 Apr 2013 17:13:34 -0700 Subject: [PATCH] Fix custom Roles in entity_provider cookbook. The documentation seems to assume the implementation present in commit https://github.com/symfony/symfony/pull/1673, which reverted soon after due to a potential, but undisclosed security hole (citation @schmittjoh in https://github.com/symfony/symfony/commit/af70ac8d777873c49347ac828a817a400006cbea). This incorrect documentation has likely been the source of many of the following issues: * symfony/symfony#1538 - [ACL RoleSecurityIdentity] check if instance of Role * symfony/symfony#1748 - Replace Role to RoleInterface for RoleSecurityIdentity * symfony/symfony#4309 - Issue related to custom group (role) and ACL/ACE * symfony/symfony#5026 - potential bug in Symfony\Component\Security\Acl\Domain\RoleSecurityIdentity * symfony/symfony#5076 - [Acl] altered the behaviour of RoleSecurityIdentity * symfony/symfony#5171 - Fix/role security identity * symfony/symfony#5303 - [Security] Check for RoleInterface instead of Role object in RoleSecurityIdentity * symfony/symfony#5909 - Allow Custom Roles to implement the RoleInterface * symfony/symfony#6012 - Securityidentity fix --- cookbook/security/entity_provider.rst | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/cookbook/security/entity_provider.rst b/cookbook/security/entity_provider.rst index ceafa763e52..8a36ae80c57 100644 --- a/cookbook/security/entity_provider.rst +++ b/cookbook/security/entity_provider.rst @@ -592,13 +592,12 @@ The ``AcmeUserBundle:Group`` entity class defines three table fields (``id``, ``name`` and ``role``). The unique ``role`` field contains the role name used by the Symfony security layer to secure parts of the application. The most important thing to notice is that the ``AcmeUserBundle:Group`` entity class -implements the :class:`Symfony\\Component\\Security\\Core\\Role\\RoleInterface` -that forces it to have a ``getRole()`` method:: +extends the :class:`Symfony\\Component\\Security\\Core\\Role\\Role`:: // src/Acme/Bundle/UserBundle/Entity/Group.php namespace Acme\UserBundle\Entity; - use Symfony\Component\Security\Core\Role\RoleInterface; + use Symfony\Component\Security\Core\Role\Role; use Doctrine\Common\Collections\ArrayCollection; use Doctrine\ORM\Mapping as ORM; @@ -606,7 +605,7 @@ that forces it to have a ``getRole()`` method:: * @ORM\Table(name="acme_groups") * @ORM\Entity() */ - class Group implements RoleInterface + class Group extends Role { /** * @ORM\Column(name="id", type="integer") pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.

Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy