app/config/security.yml
author cavaliet
Wed, 26 Oct 2011 16:01:33 +0200
changeset 17 a16b5806e3f0
parent 3 e54dfe4d0b2b
permissions -rwxr-xr-x
Little modification to enable routing from tag list.
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
0
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
     1
security:
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
     2
    encoders:
3
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
     3
        #Symfony\Component\Security\Core\User\User: plaintext
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
     4
        Company\UserBundle\Entity\User: sha512
0
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
     5
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
     6
    role_hierarchy:
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
     7
        ROLE_ADMIN:       ROLE_USER
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
     8
        ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
     9
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    10
    providers:
3
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    11
#        in_memory:
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    12
#            users:
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    13
#                user:  { password: userpass, roles: [ 'ROLE_USER' ] }
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    14
#                admin: { password: adminpass, roles: [ 'ROLE_ADMIN' ] }
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    15
        fos_userbundle:
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    16
            id: fos_user.user_manager
0
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    17
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    18
    firewalls:
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    19
        dev:
3
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    20
          pattern:  ^/(_(profiler|wdt)|css|images|js)/
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    21
          security: false
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    22
            
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    23
        main:
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    24
          pattern: ^/
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    25
          form_login:
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    26
            provider: fos_userbundle
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    27
          logout:       true
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    28
          anonymous:    true
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    29
          
0
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    30
3
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    31
#        login:
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    32
#            pattern:  ^/demo/secured/login$
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    33
#            security: false
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    34
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    35
#        secured_area:
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    36
#            pattern:    ^/demo/secured/
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    37
#            form_login:
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    38
#                check_path: /demo/secured/login_check
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    39
#                login_path: /demo/secured/login
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    40
#            logout:
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    41
#                path:   /demo/secured/logout
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    42
#                target: /demo/
0
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    43
            #anonymous: ~
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    44
            #http_basic:
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    45
            #    realm: "Secured Demo Area"
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    46
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    47
    access_control:
3
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    48
      - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    49
      - { path: ^/register, role: IS_AUTHENTICATED_ANONYMOUSLY }
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    50
      - { path: ^/resetting, role: IS_AUTHENTICATED_ANONYMOUSLY }
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    51
      - { path: ^/admin/, role: ROLE_ADMIN }
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    52
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    53
    role_hierarchy:
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    54
      ROLE_ADMIN:       ROLE_USER
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    55
      ROLE_SUPER_ADMIN: ROLE_ADMIN
e54dfe4d0b2b add FOSUserBundle
ymh <ymh.work@gmail.com>
parents: 0
diff changeset
    56
    
0
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    57
        #- { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY, requires_channel: https }
7f95f8617b0b first commit
ymh <ymh.work@gmail.com>
parents:
diff changeset
    58
        #- { path: ^/_internal, roles: IS_AUTHENTICATED_ANONYMOUSLY, ip: 127.0.0.1 }