diff --git a/components/security/authorization.rst b/components/security/authorization.rst index 7dc0433fd8e..0adc61cfb2c 100644 --- a/components/security/authorization.rst +++ b/components/security/authorization.rst @@ -29,6 +29,8 @@ An authorization decision will always be based on a few things: Any object on which for which access control needs to be checked, like an article or a comment object. +.. components-security-access-decision-manager: + Access Decision Manager ----------------------- @@ -69,6 +71,11 @@ recognizes several strategies: $allowIfAllAbstainDecisions, $allowIfEqualGrantedDeniedDecisions ); + +.. seealso:: + + You can change the default strategy in the + :ref:`configuration `. Voters ------ diff --git a/cookbook/security/voters.rst b/cookbook/security/voters.rst index 1db4a93d264..acd0f84d1e2 100644 --- a/cookbook/security/voters.rst +++ b/cookbook/security/voters.rst @@ -167,6 +167,8 @@ and tag it as a "security.voter": see :ref:`service-container-imports-directive`. To read more about defining services in general, see the :doc:`/book/service_container` chapter. +.. security-voters-change-strategy: + Changing the Access Decision Strategy ------------------------------------- @@ -212,3 +214,8 @@ application configuration file with the following code. That's it! Now, when deciding whether or not a user should have access, the new voter will deny access to any user in the list of blacklisted IPs. + +.. seealso:: + + For a more advanced usage see + :ref:`components-security-access-decision-manager`.