firewall - Why the access_control not working in my symfony project? -


symfony version: 3.0

my security configuration is:

security: session_fixation_strategy:  none role_hierarchy:     role_admin:       [role_manager, role_user]     role_super_admin: role_admin  encoders:     demo\bundle\userbundle\entity\user: bcrypt     demo\bundle\userbundle\entity\manager: bcrypt providers:     frontend_user_provider:         id: demo.user_provider     backend_manager_provider:         id: demo.manager_provider  firewalls:     account:         anonymous:    ~         pattern: ^/         host: ^account\.demo\.com$         access_denied_url: _login         form_login:             provider: frontend_user_provider             csrf_token_generator: security.csrf.token_manager             login_path: _login             check_path: _login_check             target_path_parameter: _account         logout:             path: _logout             target: _login     backend:         anonymous: ~         pattern: ^/         host: ^admin\.demo\.com$         form_login:             provider: backend_manager_provider             csrf_token_generator: security.csrf.token_manager             login_path: _backend_login             check_path: _backend_login_check             target_path_parameter: _backend_index         logout:             path: _backend_logout             target: _backend_login access_control:     - { path: ^/, roles: is_authenticated_anonymously }     - { path: ^/, roles: role_user, host: account.demo.com }     - { path: ^/login.html, roles: is_authenticated_anonymously, host: admin.demo.com }     - { path: ^/, roles: role_admin, host: admin.demo.com }

i plan account.demo.com normal user can works in site. , admin subdomain administrator can manage site. so, account page & admin page should limited view if user not login. now, these pages can viewed anno user. access_control not working me.

http://account.demo.com/post/add.html should denied when user not login. anon. user can view it.

another question is: how make cookies of subdomains excluding admin subdomain? after normal user login, can switch page www account without login again.


Comments

Post a Comment

Popular posts from this blog

sql server - Cannot query correctly (MSSQL - PHP - JSON) -

i have little problem on project. , turns out query result returns nothing when value of first name or last name has 'ñ' in it. here's code config.php: <?php ini_set('mssql.charset', 'utf-8'); header('content-type: text/html; charset=utf-8'); $servername = "192.168.1.21"; /* ip add of db server */ $connection = array("database" => "db", "uid" => "?", "pwd" => "***"); $conn = sqlsrv_connect($servername, $connection); if(!$conn){ echo "connection not established."; die(print_r(sqlsrv_errors(), true)); } ?> myquery: $idnumber = $_post["idnum"]; $response = array(); $query2 = "select clname, cfname, cmname, cqualifier student cidno = '$idnumber'"; try{ $stmt2 = sqlsrv_query($conn, $query2); } catch(pdoexeption $ex){ $response["success"] = 0; $response["message"] = "d...
Read more

php - trouble displaying mysqli database results in correct order -

i have table in database stores events , date expire. want display events on website display current events first expired events after? i have tried following sql $sql = "select noticeid, notice, noticedesc, noticeimg, noticedate, expirydate tbl_notices group noticeid ,expired order expirydate asc"; but returns expired results first due expirydate being ordered asc in query. my tbl_notice structure looks this noticeid => int(4) notice => varchar(100) noticedesc => text noticedate => timestamp noticeimg => varchar(40) expirydate => datetime expired => int(1) 0 current or 1 expired my php code is $sql = "select noticeid, notice, noticedesc, noticeimg, noticedate, expirydate tbl_notices group noticeid ,expired order expirydate asc"; $result = mysqli_query($conn,$sql); if ($result->num_rows > 0) { // output data of each row while($row = $result->fetch_assoc()) { ...
Read more

C++ Linked List -

i trying create linked list download txt file , use linked list handle file line line. when handling downloaded linked list operations performed on such text editor would. encountering problems however. seems "node(string value)" section of code has wrong though original node() declaration no arguments passes. unable figure out quite is. node.h class node { public: node(); node(string value); void setnext(node *nextnode); // allows user set "next" pointer of node points friend class linkedlist; private: string data; // data box node* next; // pointer box }; node.cpp # include <string> # include "node.h" using namespace std; node::node() { data = ""; next = null; } node::node(string value) { data = value; next = null; } void node::setnext(node *nextnode) // allows user set "next" pointer of node points { this->next = nextnode; } your #include <string> ...
Read more