From 6df989829fa0d0d2917fd3369410a31a2dc27db9 Mon Sep 17 00:00:00 2001
From: Kevin R <22906111+kevinreniers@users.noreply.github.com>
Date: Fri, 9 Aug 2019 21:48:20 +0200
Subject: [PATCH] Update expressions.rst

Clarify the difference between the `is_anonymous` function and `IS_AUTHENTICATED_ANONYMOUSLY`.
---
 security/expressions.rst | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/security/expressions.rst b/security/expressions.rst
index c414fbcd4d0..40aa4109624 100644
--- a/security/expressions.rst
+++ b/security/expressions.rst
@@ -56,7 +56,9 @@ Additionally, you have access to a number of functions inside the expression:
     Returns ``true`` if the user is authenticated via "remember-me" or authenticated
     "fully" - i.e. returns true if the user is "logged in".
 ``is_anonymous``
-    Equal to using ``IS_AUTHENTICATED_ANONYMOUSLY`` with the ``isGranted()`` function.
+    Returns ``true`` if the user is anonymous. That is, the firewall confirms that it
+    does not know this user's identity. This is different from ``IS_AUTHENTICATED_ANONYMOUSLY``,
+    which is granted to *all* users, including authenticated ones.
 ``is_remember_me``
     Similar, but not equal to ``IS_AUTHENTICATED_REMEMBERED``, see below.
 ``is_fully_authenticated``