Skip to content

[Security] Better explain what happens when multiple roles are passed #11988

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 19, 2019

Conversation

javiereguiluz
Copy link
Member

@javiereguiluz javiereguiluz added this to the 3.4 milestone Jul 18, 2019
@javiereguiluz javiereguiluz merged commit f001b9b into symfony:3.4 Jul 19, 2019
javiereguiluz added a commit that referenced this pull request Jul 19, 2019
…es are passed (javiereguiluz)

This PR was merged into the 3.4 branch.

Discussion
----------

[Security] Better explain what happens when multiple roles are passed

Fixes symfony/symfony#32594

Commits
-------

f001b9b [Security] Better explain what happens when multiple roles are passed
@@ -294,7 +294,8 @@ is_granted

Returns ``true`` if the current user has the given role. If several roles are
passed in an array, ``true`` is returned if the user has at least one of
them.
them or all of them, depending on the
:ref:`Access Decision Manager strategy <security-access-control-enforcement-options>`.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think this is correct (see also symfony/symfony#32594 (comment)).

javiereguiluz added a commit that referenced this pull request Aug 13, 2019
This PR was merged into the 3.4 branch.

Discussion
----------

fix voting on multiple roles behavior description

reverts #11988 (see my explanation at symfony/symfony#32594 (comment))

Commits
-------

4b76554 fix voting on multiple roles behavior description
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants