yokai/security-extra-bundle

Symfony security extra features

YokaiSecurityExtraBundle

, _(*1)

, _(*2)

Installation

Add the bundle as dependency with Composer

``` bash $ composer require yokai/security-extra-bundle:1.0-dev, <sub>(*3)</sub>

### Enable the bundle in the kernel

``` php
<?php
// app/AppKernel.php

public function registerBundles()
{
    $bundles = [
        // ...
        new Yokai\SecurityExtraBundle\YokaiSecurityExtraBundle(),
    ];
}

Configuration

Imagine that you handle an entity named AppBundle\Entity\Article on which you has basic CRUD operations., <sub>(*4)</sub>

You can imagine what kind of checks you will have to implements to secure your CRUD actions :, <sub>(*5)</sub>

• browsing posts is allowed if you have the role ROLE_ARTICLE_LIST
• displaying post details is allowed if you have the role ROLE_ARTICLE_SHOW
• creating a new post is allowed if you have the role ROLE_ARTICLE_CREATE
• updating an existing post is allowed if you have the role ROLE_ARTICLE_UPDATE AND if you created this post in the first place
• deleting an existing post is allowed if you have the role ROLE_ARTICLE_DELETE AND if you created this post in the first place

OK, here is a way to configure it :, <sub>(*6)</sub>

``` yaml, <sub>(*7)</sub>

app/config/config.yml

yokai_security_extra: permissions:, <sub>(*8)</sub>

    - attributes: 'browse'
      roles:      ROLE_ARTICLE_LIST

    - attributes: 'details'
      subjects:   AppBundle\Entity\Article
      roles:      ROLE_ARTICLE_SHOW

    - attributes: 'create'
      roles:      ROLE_ARTICLE_CREATE

    - attributes: 'update'
      subjects:   AppBundle\Entity\Article
      roles:      ROLE_ARTICLE_UPDATE
      callables:  'isOwnedBy'

    - attributes: 'delete'
      subjects:   AppBundle\Entity\Article
      roles:      ROLE_ARTICLE_DELETE
      callables:  'isOwnedBy'

**note** `isOwnedBy` is a method available on `AppBundle\Entity\Article` that could look like
```php
public function isOwnedBy(User $user)
{
    return $this->author === $user;
}

Advanced

todo, <sub>(*9)</sub>

MIT License

License can be found here., <sub>(*10)</sub>

Authors

The bundle was originally created by Yann Eugoné., <sub>(*11)</sub>

See the list of contributors., <sub>(*12)</sub>