Symfony 3安全-Access_control不适用于一种路由

Question

I'm currently working on a PDF generator, but I'm having a problem accessing the url.

Anyone should be able to download the PDF. In my security.yml I currently have this:

security:
    encoders:
        FOS\UserBundle\Model\UserInterface: bcrypt

    role_hierarchy: ~

    providers:
        fos_userbundle:
            id: fos_user.user_provider.username

    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        main:
            pattern: ^/
            form_login:
                provider: fos_userbundle
                csrf_token_generator: security.csrf.token_manager
            logout:       true
            anonymous:    true

    access_control:
        - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/gc/$, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/admin, role: ROLE_USER }
        - { path: ^/, role: ROLE_USER }

I would like people to have access to the following url: /admin/maintenance/pdf/{id}

So I added the following line:

access_control:
        - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/gc/$, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/admin, role: ROLE_USER }
        - { path: ^/, role: ROLE_USER }
        - { path: ^/admin/maintenance/pdf/$, role: [ROLE_USER,IS_AUTHENTICATED_ANONYMOUSLY] }

But I'm still redirected to the login page when I'm not logged in.

I did several tests, and it is the following line that is problematic:

- {path: ^ /, role: ROLE_USER}

I guess I misconfigured my access to the url.

Someone can help me ? Thank you

Answer 1

Items in ACL are processed sequently, so you need to put it before:

access_control:
        - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/gc/$, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/admin/maintenance/pdf/$, role: [ROLE_USER,IS_AUTHENTICATED_ANONYMOUSLY] }
        - { path: ^/admin, role: ROLE_USER }
        - { path: ^/, role: ROLE_USER }

Answer 2

上移更具体的规则，以便它们首先匹配。