49 lines
2 KiB
YAML
Executable file
49 lines
2 KiB
YAML
Executable file
jms_security_extra:
|
|
secure_all_services: false
|
|
expressions: true
|
|
|
|
security:
|
|
encoders:
|
|
FOS\UserBundle\Model\UserInterface: sha512
|
|
|
|
role_hierarchy:
|
|
ROLE_ADMIN: [ROLE_USER, ROLE_REDACTEUR ]
|
|
ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]
|
|
|
|
providers:
|
|
fos_userbundle:
|
|
id: fos_user.user_provider.username
|
|
|
|
firewalls:
|
|
dev:
|
|
pattern: ^/(_(profiler|wdt)|css|images|js)/
|
|
security: false
|
|
|
|
admin:
|
|
pattern: ^/admin(?!(/login$)).*$
|
|
form_login:
|
|
provider: fos_userbundle
|
|
remember_me: true # On active la possibilité du "Se souvenir de moi" (désactivé par défaut)
|
|
check_path: /admin/login_check #
|
|
default_target_path: agisbo_agis_gallery_bg # url after login
|
|
login_path: agisbo_agis_login # url login
|
|
remember_me:
|
|
key: %secret% # On définit la clé pour le remember_me (%secret% est un parametre de parameters.ini)
|
|
anonymous: false # On autorise les utilisateurs anonymes (non identifiés)
|
|
logout:
|
|
path: /admin/logout # url logout
|
|
target: /admin/login # after logout
|
|
|
|
|
|
access_control:
|
|
- { path: ^/admin/login.*, role: IS_AUTHENTICATED_ANONYMOUSLY }
|
|
|
|
- { path: ^/admin/user/list, role: ROLE_ADMIN }
|
|
- { path: ^/admin/register, role: ROLE_ADMIN }
|
|
- { path: ^/admin/resetting, role: ROLE_ADMIN }
|
|
|
|
- { path: ^/admin/profile, role: ROLE_REDACTEUR }
|
|
- { path: ^/admin/change-password, role: ROLE_REDACTEUR }
|
|
|
|
#- { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY, requires_channel: https }
|
|
#- { path: ^/_internal/secure, roles: IS_AUTHENTICATED_ANONYMOUSLY, ip: 127.0.0.1 }
|