From 2877f9b1214c53847375afc9ce30acbdd5b14d3e Mon Sep 17 00:00:00 2001 From: Alexis Lefebvre Date: Fri, 8 Nov 2019 14:16:50 +0100 Subject: [PATCH] access_control.rst: query string is ignored --- security/access_control.rst | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/security/access_control.rst b/security/access_control.rst index 2a5f22b87d0..b964cbba505 100644 --- a/security/access_control.rst +++ b/security/access_control.rst @@ -93,10 +93,11 @@ Take the following ``access_control`` entries as an example: ]); For each incoming request, Symfony will decide which ``access_control`` -to use based on the URI, the client's IP address, the incoming host name, -and the request method. Remember, the first rule that matches is used, and -if ``ips``, ``host`` or ``methods`` are not specified for an entry, that -``access_control`` will match any ``ips``, ``host`` or ``methods``: +to use based on the URI (without the ``GET`` parameters), the +client's IP address, the incoming host name, and the request method. +Remember, the first rule that matches is used, and if ``ips``, ``host`` +or ``methods`` are not specified for an entry, that ``access_control`` +will match any ``ips``, ``host`` or ``methods``: +-----------------+-------------+-------------+------------+--------------------------------+-------------------------------------------------------------+ | URI | IP | HOST | METHOD | ``access_control`` | Why? |