这是我的 security.yml 文件
security:
access_denied_url: home
encoders:
Coupon\MainBundle\Entity\User:
algorithm: sha512
iterations: 1
encode_as_base64: true
role_hierarchy:
ROLE_ADMIN: [ROLE_USER]
ROLE_SUPER_ADMIN: [ROLE_ADMIN]
providers:
main:
entity: { class: CouponMainBundle:User }
firewalls:
secured_area:
pattern: ^/
form_login:
check_path: _auth_check
always_use_default_target_path: true
default_target_path: /dut
login_path: /
logout:
path: action_logout
target: action_login
anonymous: ~
access_control:
- { path: ^/admin.*, role: ROLE_ADMIN }
但是当尝试/admin
与拥有ROLE_ADMIN
(var_dump for getRoles 返回array(2) { [0]=> string(10) "ROLE_ADMIN" [1]=> string(9) "ROLE_USER" }
)的用户一起访问时,它会将我重定向到主页,你能帮我吗?我的错在哪里?