Skip to content

Commit e4ec52b

Browse files
committed
minor #15074 [Security] Update description for Access decision strategies (comp64)
This PR was submitted for the 5.2 branch but it was merged into the 4.4 branch instead. Discussion ---------- [Security] Update description for Access decision strategies Updated the description to reflect the current behavior of the builtin AccessDecisionManager. <!-- If your pull request fixes a BUG, use the oldest maintained branch that contains the bug (see https://symfony.com/releases for the list of maintained branches). If your pull request documents a NEW FEATURE, use the same Symfony branch where the feature was introduced (and `5.x` for features of unreleased versions). --> Commits ------- ac44f85 Update description for Access decision strategies
2 parents 735f543 + ac44f85 commit e4ec52b

File tree

1 file changed

+8
-4
lines changed

1 file changed

+8
-4
lines changed

security/voters.rst

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -278,12 +278,16 @@ There are three strategies available:
278278
This grants access as soon as there is *one* voter granting access;
279279

280280
``consensus``
281-
This grants access if there are more voters granting access than denying;
281+
This grants access if there are more voters granting access than
282+
denying. If case of a tie the decision is based on the
283+
``allow_if_equal_granted_denied`` config option (defaulting to ``true``);
282284

283285
``unanimous``
284-
This only grants access if there is no voter denying access. If all voters
285-
abstained from voting, the decision is based on the ``allow_if_all_abstain``
286-
config option (which defaults to ``false``).
286+
This only grants access if there is no voter denying access.
287+
288+
Regardless the chosen strategy, if all voters abstained from voting, the
289+
decision is based on the ``allow_if_all_abstain`` config option (which
290+
defaults to ``false``).
287291

288292
In the above scenario, both voters should grant access in order to grant access
289293
to the user to read the post. In this case, the default strategy is no longer

0 commit comments

Comments
 (0)