diff --git a/cookbook/security/voters.rst b/cookbook/security/voters.rst index 344285a7e7d..7e1e176e422 100644 --- a/cookbook/security/voters.rst +++ b/cookbook/security/voters.rst @@ -40,12 +40,12 @@ The ``vote()`` method must implement the business logic that verifies whether or not the user is granted access. This method must return one of the following values: -* ``VoterInterface::ACCESS_GRANTED``: The user is allowed to access the application +* ``VoterInterface::ACCESS_GRANTED``: The user is allowed to access something * ``VoterInterface::ACCESS_ABSTAIN``: The voter cannot decide if the user is granted or not -* ``VoterInterface::ACCESS_DENIED``: The user is not allowed to access the application +* ``VoterInterface::ACCESS_DENIED``: The user is not allowed to access something In this example, you'll check if the user's IP address matches against a list of -blacklisted addresses. If the user's IP is blacklisted, you'll return +blacklisted addresses and "something" will be the application. If the user's IP is blacklisted, you'll return ``VoterInterface::ACCESS_DENIED``, otherwise you'll return ``VoterInterface::ACCESS_ABSTAIN`` as this voter's purpose is only to deny access, not to grant access.