Skip to content

Commit c99bfc0

Browse files
committed
minor #15578 [Security] Small improvement (noniagriconomie)
This PR was squashed before being merged into the 4.4 branch. Discussion ---------- [Security] Small improvement Small improvement Commits ------- 0380688 [Security] Small improvement
2 parents 6124a80 + 0380688 commit c99bfc0

File tree

1 file changed

+13
-6
lines changed

1 file changed

+13
-6
lines changed

security/expressions.rst

Lines changed: 13 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -12,16 +12,23 @@ Security: Complex Access Controls with Expressions
1212
In addition to a role like ``ROLE_ADMIN``, the ``isGranted()`` method also
1313
accepts an :class:`Symfony\\Component\\ExpressionLanguage\\Expression` object::
1414

15+
// src/Controller/MyController.php
16+
namespace App\Controller;
17+
18+
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
1519
use Symfony\Component\ExpressionLanguage\Expression;
16-
// ...
20+
use Symfony\Component\HttpFoundation\Response;
1721

18-
public function index(): Response
22+
class MyController extends AbstractController
1923
{
20-
$this->denyAccessUnlessGranted(new Expression(
21-
'"ROLE_ADMIN" in roles or (not is_anonymous() and user.isSuperAdmin())'
22-
));
24+
public function index(): Response
25+
{
26+
$this->denyAccessUnlessGranted(new Expression(
27+
'"ROLE_ADMIN" in roles or (not is_anonymous() and user.isSuperAdmin())'
28+
));
2329

24-
// ...
30+
// ...
31+
}
2532
}
2633

2734
In this example, if the current user has ``ROLE_ADMIN`` or if the current

0 commit comments

Comments
 (0)