Symfony2 access-control give me 403 error

Question

I know that my title is not very clear. I explain me, I create a security:

security:
encoders:
   Bundles\UserBundle\Entity\user: sha512

role_hierarchy:
    ROLE_MENAGE:        [ROLE_USER]
    ROLE_EMPLOYE:       [ROLE_ADMIN]
    ROLE_GERANT:        [ROLE_SUPER_ADMIN]
    ROLE_INTERCOMMUNAL: [ROLE_GERANT]

providers:
    main:
        id: fos_user.user_provider.username

firewalls:
    main:
        pattern:        ^/
        anonymous:      true
        provider:       main
        form_login:
            login_path: fos_user_security_login
            check_path: fos_user_security_check
        logout:
            path:       fos_user_security_logout
            target:     /login
        remember_me:
            key:        %secret%
access_control:
    - { path: ^/login$, roles: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/register, roles: ROLE_MENAGE }
    - { path: ^/resetting, roles: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/, roles: ROLE_MENAGE }
    - { path: ^/EncoderDechet, roles: ROLE_EMPLOYE }
    - { path: ^/VoirConteneurs, roles: ROLE_GERANT }
    - { path: ^/GenererFacture, roles: ROLE_INTERCOMMUNAL }
    - { path: ^/Statistique, roles: ROLE_GERANT }

Like you can see in this SECURITY.YML I define a role hierarchy. When I log In with a User who have : ROLE_EMPLOYE as role, I have can have access to /register. But this path must have as role : EMPLOYE, and it give me an 403 : access denied.

Can you explain me where I made a mistake ?

I'm sorry it was 403

Pierre Whats Up Scadra
– Pierre Whats Up Scadra

2017-07-18 17:33:29 +00:00
Commented Jul 18, 2017 at 17:33 — Pierre Whats Up Scadra
– Pierre Whats Up Scadra, Commented Jul 18, 2017 at 17:33

Thomas C. · Accepted Answer · 2017-07-18 18:06:07Z

1

Your role hierarchy looks wrong.

It should be

ROLE_B: ROLE_A
ROLE_C: ROLE_B
ROLE_D: ROLE_C

So something like

ROLE_MENAGE:        ROLE_USER
ROLE_EMPLOYE:       ROLE_MENAGE
ROLE_GERANT:        ROLE_EMPLOYE
ROLE_INTERCOMMUNAL: ROLE_GERANT

Which would give you 5 roles going: USER < MENAGE < EMPLOYE < GERANT < INTERCOMMUNAL

If you do need ROLE_ADMIN & ROLE_SUPER_ADMIN just add them in there where you need them.

Here is what I use on my current project for example

ROLE_INFLUENCER:    ROLE_USER
ROLE_COMPANY:       ROLE_INFLUENCER
ROLE_COMPANY_ADMIN: ROLE_COMPANY
ROLE_SITE_ADMIN:    ROLE_COMPANY_ADMIN
ROLE_SUPER_ADMIN:   ROLE_SITE_ADMIN

answered Jul 18, 2017 at 18:06

Thomas C.

3,7065 gold badges38 silver badges42 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Pierre Whats Up Scadra Over a year ago

ROLE_MENAGE: [ROLE_USER] ROLE_EMPLOYE: [ROLE_MENAGE] ROLE_GERANT: [ROLE_EMPLOYE] ROLE_INTERCOMMUNAL: [ROLE_GERANT] like this ?

Thomas C. Over a year ago

You do not need the [ ] characters, otherwise it looks ok

Collectives™ on Stack Overflow

Symfony2 access-control give me 403 error

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related