Symfony 2: protect login page and administrator with ip

Question

I would like to protect my administrator folder like this:

access_control:
    - { path: ^/administrator/login$, roles: IS_AUTHENTICATED_ANONYMOUSLY, ip: myip }
    - { path: ^/administrator, roles: ROLE_SUPER_ADMIN, ip: myip }
    - { path: ^/administrator, roles: ROLE_NO_ACCESS }

when accessing the administrator folder from another ip address it throws me to the login page and reports a redirect loop. Can someone explain me why don't i get an Access forbidden error instead of the redirect loop error?

Answer 1

Your login is also secured with your ip requirement, so an access denied error you get redirect to the login page, but you get an acces denied too, redirect to the same page, access denied, redirect, and so on.

Remove the IP requirement from your login page.