jenkoian

<?php

namespace Acme\Framework\Security;

use Acme\Authentication\User;
use Symfony\Component\Security\Core\Exception\UnsupportedUserException;
use Symfony\Component\Security\Core\Exception\UsernameNotFoundException;
use Symfony\Component\Security\Core\User\UserInterface;
use Symfony\Component\Security\Core\User\UserProviderInterface;

jenkoian

<?php

namespace Acme\Framework\Security;

use Acme\Authentication\AuthenticationSessionInterface;
use Acme\Authentication\User;
use Acme\Authentication\UserManagerInterface;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;

jenkoian

<?php
// ...

    /**
     * Map legacy roles to symfony roles. Legacy roles are in following format:
     * ['moderator' => '1']
     */
    private function mapRoles()
    {
        if (empty($this->legacyRoles)) {

jenkoian

<?php
// ...
        $c->loadFromExtension(
            'security',
            [
                'providers' => [
                    'legacy' => [
                        'id' => 'app.legacy_user_provider'
                    ]
                ],

jenkoian

<?php
//...

$container->loadFromExtension(‘security’, [
    //...

    ‘access_control’ => [
        [‘path’ => ‘^/content/add’, ‘role’ => ‘ROLE_EDITOR’],
        [‘path’ => ‘^/content/moderate’, ‘role’ => ‘ROLE_MODERATOR’],
        [‘path’ => ‘^/user/edit’, ‘role’ => ‘ROLE_ADMIN’]

jenkoian

<?php
//...

$container->loadFromExtension(‘security’, [
    //...

    ‘access_control’ => [
        [‘path’ => ‘^/content/add’, ‘role’ => ‘add_content’],
        [‘path’ => ‘^/content/moderate’, ‘role’ => ‘moderate_content’],
        [‘path’ => ‘^/user/edit’, ‘role’ => ‘edit_user’]

jenkoian

<?php
//...
class PermissionUrlMap
{
    /**
     * Order matters, in that it will match the first one it comes across. So put more specific URLs higher up.
     * 
     * @var array Format is [‘permission’ => ‘/path/to/page’]
     */
    public static $permissionMap = [

jenkoian

<?php
//...

class PermissionUrlRequestMatcher implements RequestMatcherInterface
{
    /**
     * {@inheritdoc}
     */
    public function matches(Request $request)
    {

jenkoian

<?php
//...
use ...CallableCompilerPass;

    //...

    protected function configurePasses(ContainerBuilder $c)
    {
        $c->addCompilerPass(new CallableCompilerPass(function (ContainerBuilder $c) {
            if (!$c->hasDefinition(‘security.access_map’)) {

jenkoian

<?php
//...
class PermissionUrlVoter implements VoterInterface
{
    //...

    /**
     * {@inheritdoc}
     */
    public function vote(TokenInterface $token, $object, array $attributes)