Skip to content

[Security] Deprecated using more than one role in access_control rules #12371

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Sep 26, 2019

Conversation

javiereguiluz
Copy link
Member

Fixes #12363.

@javiereguiluz javiereguiluz added this to the 4.4 milestone Sep 25, 2019
javiereguiluz added a commit that referenced this pull request Sep 26, 2019
…_control rules (javiereguiluz)

This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Deprecated using more than one role in access_control rules

Fixes #12363.

Commits
-------

19475ed [Security] Deprecated using more than one role in access_control rules
@javiereguiluz javiereguiluz merged commit 19475ed into symfony:4.4 Sep 26, 2019
@javiereguiluz javiereguiluz deleted the fix_12363 branch September 26, 2019 06:41
@fabpot
Copy link
Member

fabpot commented Nov 9, 2019

To be reverted

fabpot added a commit to symfony/symfony that referenced this pull request Nov 9, 2019
…rule (chalasr)

This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Fix defining multiple roles per access_control rule

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        |  symfony/symfony-docs#12371 needs to be reverted

#33584 deprecated passing multiple attributes to `AccessDecisionManager::decide()`, but this change must not impact `access_control` as you cannot define multiple rules with the same criteria for request matching (the first match wins).

Commits
-------

338b3df [Security] Fix defining multiple roles per access_control rule
symfony-splitter pushed a commit to symfony/security that referenced this pull request Nov 9, 2019
…rule (chalasr)

This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Fix defining multiple roles per access_control rule

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        |  symfony/symfony-docs#12371 needs to be reverted

#33584 deprecated passing multiple attributes to `AccessDecisionManager::decide()`, but this change must not impact `access_control` as you cannot define multiple rules with the same criteria for request matching (the first match wins).

Commits
-------

338b3dfd9f [Security] Fix defining multiple roles per access_control rule
wouterj added a commit that referenced this pull request Nov 9, 2019
…n access_control rules (javiereguiluz)"

This reverts commit 8f9a31a, reversing
changes made to e1b79e0.
wouterj added a commit that referenced this pull request Nov 9, 2019
* 4.4:
  Revert "minor #12371 [Security] Deprecated using more than one role in access_control rules (javiereguiluz)"
  include xml and php examples
  Update security.rst
  Update mercure.rst
@wouterj
Copy link
Member

wouterj commented Nov 9, 2019

Reverted in 462f36a while merging #12538

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants