@@ -424,36 +424,3 @@ deal with this low level session variable. However, the
424424can be used to read (like in the example above) or set this value manually.
425425
426426.. _`MakerBundle` : https://symfony.com/doc/current/bundles/SymfonyMakerBundle/index.html
427- =======
428- // ...
429- 'access_control' => [
430- ['path' => '^/login', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
431- ['path' => '^/', 'roles' => 'ROLE_ADMIN'],
432- ],
433-
434- 3. Be Sure check_path Is Behind a Firewall
435- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
436-
437- Next, make sure that your ``check_path `` URL (e.g. ``/login ``) is behind
438- the firewall you're using for your form login (in this example, the single
439- firewall matches *all * URLs, including ``/login ``). If ``/login ``
440- doesn't match any firewall, you'll receive a ``Unable to find the controller
441- for path "/login" `` exception.
442-
443- 4. Multiple Firewalls Don't Share the Same Security Context
444- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
445-
446- If you're using multiple firewalls and you authenticate against one firewall,
447- you will *not * be authenticated against any other firewalls automatically.
448- Different firewalls are like different security systems. To do this you have
449- to explicitly specify the same :ref: `reference-security-firewall-context `
450- for different firewalls. But usually for most applications, having one
451- main firewall is enough.
452-
453- 5. Routing Error Pages Are not Covered by Firewalls
454- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
455-
456- As routing is done *before * security, 404 error pages are not covered by
457- any firewall. This means you can't check for security or even access the
458- user object on these pages. See :doc: `/controller/error_pages `
459- for more details.
0 commit comments