Tweaks

Author: javiereguiluz

security/expressions.rst

@@ -26,15 +26,22 @@ and ``#[IsGranted()]`` attribute also accept an
 
         class MyController extends AbstractController
         {
+            #[IsGranted(new Expression('is_granted("ROLE_ADMIN") or is_granted("ROLE_MANAGER")'))]
+            public function show(): Response
+            {
+                // ...
+            }
+
             #[IsGranted(new Expression(
                 '"ROLE_ADMIN" in role_names or (is_authenticated() and user.isSuperAdmin())'
             ))]
-            public function index(): Response
+            public function edit(): Response
             {
                 // ...
             }
         }
-    .. code-block:: php-attributes
+
+    .. code-block:: php
 
         // src/Controller/MyController.php
         namespace App\Controller;
@@ -45,25 +52,16 @@ and ``#[IsGranted()]`` attribute also accept an
 
         class MyController extends AbstractController
         {
-            #[IsGranted(new Expression('is_granted("ROLE_ADMIN") or is_granted("ROLE_MANAGER")'))]
-            public function index(): Response
+            public function show(): Response
             {
+                $this->denyAccessUnlessGranted(new Expression(
+                    'is_granted("ROLE_ADMIN") or is_granted("ROLE_MANAGER")'
+                ));
+
                 // ...
             }
-        }
-
-    .. code-block:: php
-
-        // src/Controller/MyController.php
-        namespace App\Controller;
 
-        use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
-        use Symfony\Component\ExpressionLanguage\Expression;
-        use Symfony\Component\HttpFoundation\Response;
-
-        class MyController extends AbstractController
-        {
-            public function index(): Response
+            public function edit(): Response
             {
                 $this->denyAccessUnlessGranted(new Expression(
                     '"ROLE_ADMIN" in role_names or (is_authenticated() and user.isSuperAdmin())'