Fixes

Author: Cydonia7

book/security.rst

@@ -816,19 +816,13 @@ to users that have a specific role.
 Securing Controllers and other Code
 ...................................
 
-You can easily deny access from inside a controller:
-
-.. versionadded:: 2.6
-    The ``denyAccessUnlessGranted()`` method was introduced in Symfony 2.6. Previously (and
-    still now), you could check access directly and throw the ``AccessDeniedException`` as shown
-    in the example below).
-
-.. code-block:: php
+You can easily deny access from inside a controller::
 
     // ...
 
     public function helloAction($name)
     {
+        // The second parameter is used to specify on what object the role is tested.
         $this->denyAccessUnlessGranted('ROLE_ADMIN', null, 'Unable to access this page!');
 
         // Old way :
@@ -839,6 +833,11 @@ You can easily deny access from inside a controller:
         // ...
     }
 
+.. versionadded:: 2.6
+    The ``denyAccessUnlessGranted()`` method was introduced in Symfony 2.6. Previously (and
+    still now), you could check access directly and throw the ``AccessDeniedException`` as shown
+    in the example above).
+
 In both cases, a special
 :class:`Symfony\\Component\\Security\\Core\\Exception\\AccessDeniedException`
 is thrown, which ultimately triggers a 403 HTTP response inside Symfony.