@@ -45,7 +45,7 @@ authentication (i.e. the old-school username/password box):
45
45
security :
46
46
firewalls :
47
47
secured_area :
48
- pattern : ^/
48
+ pattern : ^/
49
49
anonymous : ~
50
50
http_basic :
51
51
realm : " Secured Demo Area"
@@ -148,8 +148,8 @@ that looks like the following:
148
148
* All URLs *not * matching ``/admin/* `` are accessible by all users (and the
149
149
user is never prompted to log in).
150
150
151
- Let's look briefly at how security works and how each part of the configuration
152
- comes into play.
151
+ Read this short summary about how security works and how each part of the
152
+ configuration comes into play.
153
153
154
154
How Security Works: Authentication and Authorization
155
155
----------------------------------------------------
@@ -300,11 +300,11 @@ First, enable form login under your firewall:
300
300
security :
301
301
firewalls :
302
302
secured_area :
303
- pattern : ^/
303
+ pattern : ^/
304
304
anonymous : ~
305
305
form_login :
306
- login_path : login
307
- check_path : login_check
306
+ login_path : login
307
+ check_path : login_check
308
308
309
309
.. code-block :: xml
310
310
@@ -373,10 +373,10 @@ submission (i.e. ``/login_check``):
373
373
374
374
# app/config/routing.yml
375
375
login :
376
- path : /login
377
- defaults : { _controller: AcmeSecurityBundle:Security:login }
376
+ path : /login
377
+ defaults : { _controller: AcmeSecurityBundle:Security:login }
378
378
login_check :
379
- path : /login_check
379
+ path : /login_check
380
380
381
381
.. code-block :: xml
382
382
@@ -537,7 +537,7 @@ And that's it! When you submit the form, the security system will automatically
537
537
check the user's credentials and either authenticate the user or send the
538
538
user back to the login form where the error can be displayed.
539
539
540
- Let's review the whole process:
540
+ To review the whole process:
541
541
542
542
#. The user tries to access a resource that is protected;
543
543
#. The firewall initiates the authentication process by redirecting the
@@ -633,8 +633,8 @@ see :doc:`/cookbook/security/form_login`.
633
633
634
634
firewalls :
635
635
login_firewall :
636
- pattern : ^/login$
637
- anonymous : ~
636
+ pattern : ^/login$
637
+ anonymous : ~
638
638
secured_area :
639
639
pattern : ^/
640
640
form_login : ~
@@ -1211,13 +1211,14 @@ aren't stored anywhere in a database. The actual user object is provided
1211
1211
by Symfony (:class: `Symfony\\ Component\\ Security\\ Core\\ User\\ User `).
1212
1212
1213
1213
.. tip ::
1214
+
1214
1215
Any user provider can load users directly from configuration by specifying
1215
1216
the ``users `` configuration parameter and listing the users beneath it.
1216
1217
1217
1218
.. caution ::
1218
1219
1219
1220
If your username is completely numeric (e.g. ``77 ``) or contains a dash
1220
- (e.g. ``user-name ``), you should use that alternative syntax when specifying
1221
+ (e.g. ``user-name ``), you should use an alternative syntax when specifying
1221
1222
users in YAML:
1222
1223
1223
1224
.. code-block :: yaml
@@ -1695,8 +1696,6 @@ Access Control
1695
1696
Now that you have a User and Roles, you can go further than URL-pattern based
1696
1697
authorization.
1697
1698
1698
- .. _book-security-securing-controller :
1699
-
1700
1699
Access Control in Controllers
1701
1700
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1702
1701
0 commit comments