From 5e6031b34694e9b981c7b662cd878ad906af9f63 Mon Sep 17 00:00:00 2001 From: Oskar Stark Date: Tue, 12 Jun 2018 10:52:10 +0200 Subject: [PATCH] use is_granted() instead of deprecated has_role() Deprecated in https://github.com/symfony/symfony/pull/27305 --- best_practices/security.rst | 2 +- security.rst | 2 +- security/access_control.rst | 6 +++--- security/expressions.rst | 8 +++++--- 4 files changed, 10 insertions(+), 8 deletions(-) diff --git a/best_practices/security.rst b/best_practices/security.rst index a78f8327196..b959bb9df2e 100644 --- a/best_practices/security.rst +++ b/best_practices/security.rst @@ -121,7 +121,7 @@ Using ``@Security``, this looks like: * Displays a form to create a new Post entity. * * @Route("/new", name="admin_post_new") - * @Security("has_role('ROLE_ADMIN')") + * @Security("is_granted('ROLE_ADMIN')") */ public function new() { diff --git a/security.rst b/security.rst index 40305a9b8cf..f39a77cad9e 100644 --- a/security.rst +++ b/security.rst @@ -892,7 +892,7 @@ using annotations:: use Sensio\Bundle\FrameworkExtraBundle\Configuration\Security; /** - * @Security("has_role('ROLE_ADMIN')") + * @Security("is_granted('ROLE_ADMIN')") */ public function hello($name) { diff --git a/security/access_control.rst b/security/access_control.rst index 7c60ac7f8c1..c67cc78cc4d 100644 --- a/security/access_control.rst +++ b/security/access_control.rst @@ -265,7 +265,7 @@ key: access_control: - path: ^/_internal/secure - allow_if: "'127.0.0.1' == request.getClientIp() or has_role('ROLE_ADMIN')" + allow_if: "'127.0.0.1' == request.getClientIp() or is_granted('ROLE_ADMIN')" .. code-block:: xml @@ -279,7 +279,7 @@ key: + allow-if="'127.0.0.1' == request.getClientIp() or is_granted('ROLE_ADMIN')" /> @@ -288,7 +288,7 @@ key: 'access_control' => array( array( 'path' => '^/_internal/secure', - 'allow_if' => '"127.0.0.1" == request.getClientIp() or has_role("ROLE_ADMIN")', + 'allow_if' => '"127.0.0.1" == request.getClientIp() or is_granted("ROLE_ADMIN")', ), ), diff --git a/security/expressions.rst b/security/expressions.rst index f6ad69d4c48..35541f28e5f 100644 --- a/security/expressions.rst +++ b/security/expressions.rst @@ -61,9 +61,11 @@ Additionally, you have access to a number of functions inside the expression: Similar, but not equal to ``IS_AUTHENTICATED_REMEMBERED``, see below. ``is_fully_authenticated`` Similar, but not equal to ``IS_AUTHENTICATED_FULLY``, see below. -``has_role`` - Checks to see if the user has the given role - equivalent to an expression like - ``'ROLE_ADMIN' in roles``. +``is_granted`` + Checks if the user has the given permission. Optionally accepts a second argument + with the object where permission is checked on. It's equivalent to using + the :doc:`isGranted() method ` from the authorization + checker service. .. sidebar:: ``is_remember_me`` is different than checking ``IS_AUTHENTICATED_REMEMBERED`` pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.

Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy