File tree 1 file changed +19
-0
lines changed
1 file changed +19
-0
lines changed Original file line number Diff line number Diff line change @@ -256,6 +256,25 @@ with ``ROLE_SUPER_ADMIN``::
256
256
}
257
257
}
258
258
259
+ .. caution ::
260
+
261
+ In the previous example, avoid using the following code to check if a role
262
+ is granted permission::
263
+
264
+ // DON'T DO THIS
265
+ use Symfony\Component\Security\Core\Security;
266
+ // ...
267
+
268
+ if ($this->security->isGranted('ROLE_SUPER_ADMIN')) {
269
+ // ...
270
+ }
271
+
272
+ The ``Security::isGranted()`` method inside a voter has a significant
273
+ drawback: it does not guarantee that the checks are performed on the same
274
+ token as the one in your voter. The token in the token storage might have
275
+ changed or could change in the meantime. Always use the ``AccessDecisionManager``
276
+ instead.
277
+
259
278
If you're using the :ref: `default services.yaml configuration <service-container-services-load-example >`,
260
279
you're done! Symfony will automatically pass the ``security.helper ``
261
280
service when instantiating your voter (thanks to autowiring).
You can’t perform that action at this time.
0 commit comments