security.yml 中的 Symfony3 正则表达式 access_control

Question

I can not find the right regex to define a security rule for the following pattern:

http://example.com/ manager/?conf=xxxxx

It is to be able to access different directory according to the connected user.

for example:

/manager/conf=superadmin, role: ROLE_SUPER_ADMIN
/manager/conf=admin, role: ROLE_ADMIN
/manager/conf=user, role: ROLE_USER

Thank you in advance for your help.

Answer 1

As far as I know Symfony doesn't check query string. In your case the best option would be to define a route path like this: /manager/conf/{role} and then configure access_control:

/manager/conf/superadmin, role: ROLE_SUPER_ADMIN
/manager/conf/admin, role: ROLE_ADMIN
/manager/conf/user, role: ROLE_USER

Or depending how your configuration manager works, you could load a configuration using $role parameter that will be passed to your controller.

Another option is to use Voters ( https://symfony.com/doc/current/security/voters.html ) to verify if the user should be granted access to your resource.