Use attributes from FrameworkExtraBundle

Author: derrabus

src/Controller/Admin/BlogController.php

@@ -31,12 +31,10 @@
  *
  * See http://knpbundles.com/keyword/admin
  *
- * @IsGranted("ROLE_ADMIN")
- *
  * @author Ryan Weaver <[email protected]>
  * @author Javier Eguiluz <[email protected]>
  */
-#[Route('/admin/post')]
+#[Route('/admin/post'), IsGranted('ROLE_ADMIN')]
 class BlogController extends AbstractController
 {
     /**
@@ -125,10 +123,9 @@ public function show(Post $post): Response
 
     /**
      * Displays a form to edit an existing Post entity.
-     *
-     * @IsGranted("edit", subject="post", message="Posts can only be edited by their authors.")
      */
     #[Route('/{id<\d+>}/edit', methods: ['GET', 'POST'], name: 'admin_post_edit')]
+    #[IsGranted('edit', subject: 'post', message: 'Posts can only be edited by their authors.')]
     public function edit(Request $request, Post $post): Response
     {
         $form = $this->createForm(PostType::class, $post);
@@ -150,10 +147,9 @@ public function edit(Request $request, Post $post): Response
 
     /**
      * Deletes a Post entity.
-     *
-     * @IsGranted("delete", subject="post")
      */
     #[Route('/{id}/delete', methods: ['POST'], name: 'admin_post_delete')]
+    #[IsGranted('delete', subject: 'post')]
     public function delete(Request $request, Post $post): Response
     {
         if (!$this->isCsrfTokenValid('delete', $request->request->get('token'))) {

src/Controller/BlogController.php

@@ -36,17 +36,17 @@
 class BlogController extends AbstractController
 {
     /**
-     * @Cache(smaxage="10")
-     *
      * NOTE: For standard formats, Symfony will also automatically choose the best
      * Content-Type header for the response.
+     *
      * See https://symfony.com/doc/current/routing.html#special-parameters
      */
     #[
         Route('/', defaults: ['page' => '1', '_format' => 'html'], methods: ['GET'], name: 'blog_index'),
         Route('/rss.xml', defaults: ['page' => '1', '_format' => 'xml'], methods: ['GET'], name: 'blog_rss'),
         Route('/page/{page<[1-9]\d*>}', defaults: ['_format' => 'html'], methods: ['GET'], name: 'blog_index_paginated'),
     ]
+    #[Cache(smaxage: 10)]
     public function index(Request $request, int $page, string $_format, PostRepository $posts, TagRepository $tags): Response
     {
         $tag = null;
@@ -68,6 +68,7 @@ public function index(Request $request, int $page, string $_format, PostReposito
      * NOTE: The $post controller argument is automatically injected by Symfony
      * after performing a database query looking for a Post with the 'slug'
      * value given in the route.
+     *
      * See https://symfony.com/doc/current/bundles/SensioFrameworkExtraBundle/annotations/converters.html
      */
     #[Route('/posts/{slug}', methods: ['GET'], name: 'blog_post')]
@@ -84,14 +85,14 @@ public function postShow(Post $post): Response
     }
 
     /**
-     * @IsGranted("IS_AUTHENTICATED_FULLY")
-     * @ParamConverter("post", options={"mapping": {"postSlug": "slug"}})
-     *
      * NOTE: The ParamConverter mapping is required because the route parameter
      * (postSlug) doesn't match any of the Doctrine entity properties (slug).
+     *
      * See https://symfony.com/doc/current/bundles/SensioFrameworkExtraBundle/annotations/converters.html#doctrine-converter
      */
     #[Route('/comment/{postSlug}/new', methods: ['POST'], name: 'comment_new')]
+    #[IsGranted('IS_AUTHENTICATED_FULLY')]
+    #[ParamConverter('post', options: ['mapping' => ['postSlug' => 'slug']])]
     public function commentNew(Request $request, Post $post, EventDispatcherInterface $eventDispatcher): Response
     {
         $comment = new Comment();

src/Controller/UserController.php

@@ -23,11 +23,9 @@
 /**
  * Controller used to manage current user.
  *
- * @IsGranted("ROLE_USER")
- *
  * @author Romain Monteil <[email protected]>
  */
-#[Route('/profile')]
+#[Route('/profile'), IsGranted('ROLE_USER')]
 class UserController extends AbstractController
 {
     #[Route('/edit', methods: ['GET', 'POST'], name: 'user_edit')]