access_control security.yml

Question

你好，如果有人能幫助我，請詳細說明問題。我有在secirity.yml ACCESS_CONTROL的部分權限的問題是，如果我把這個security.yml：

的問題是，登錄表單不抓的JavaScript

security: 

firewalls: 
    frontend: 
     pattern: ^/ 
     anonymous: ~ 
     form_login: 
      login_path: /login 
      check_path: /login_check 
      default_target_path: /index 
      success_handler: authentication_handler 
     logout: 
      path: /logout 
      target: /login 
      success_handler: authentication_handler 
     security: true 
     remember_me: 
      key:  sitio123 
      lifetime: 604800  # 7 * 24 * 3600 = 604.800 = 1 semana 
     access_denied_handler: accessdenied_handler 
     #primero deben de ir los usuarios anonimos si no se entra en loop redirect 
access_control: 
    - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY } 
    - { path: ^/, roles: ROLE_U } 
    - { path: ^/admin, roles: ROLE_A } 


providers: 
    chain_provider: 
     providers: [in_memory, user_db] 
    in_memory: 
     users: 
      foo: { password: test, roles: 'ROLE_A' } 
      foo1: { password: test1, roles: 'ROLE_U' } 
    user_db: 
     entity: { class: mio\mioBundle\Entity\Empleado, property: username } 

role_hierarchy: 
    ROLE_A:  ROLE_U 

encoders: 
    mio\mioBundle\Entity\Empleado: { algorithm: sha1 } 
    Symfony\Component\Security\Core\User\User: plaintext 

移除該行

- { path: ^/, roles: ROLE_U } 

正常工作。謝謝。

Answer 1

嘗試添加該另一行：

access_control: 
    ... 
    - { path: ^/js/*, roles: IS_AUTHENTICATED_ANONYMOUSLY } 
    ... 

現在用戶不希望記錄被授權訪問JS的作用ROLE_U！

我認爲你也需要爲圖像和CSS做這個！