Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RFC] Access control in route configuration listener #20

Open
Nek- opened this issue Aug 6, 2020 · 0 comments
Open

[RFC] Access control in route configuration listener #20

Nek- opened this issue Aug 6, 2020 · 0 comments

Comments

@Nek-
Copy link
Member

Nek- commented Aug 6, 2020

For CRUD routes we can specify an access control directly in the route. This is a nice feature that the user may want to use more globally in its application.

Using a listener for that have 2 interesting points:

  • It removes the check from the controller (or partially)
  • It makes it available to use for any route

This is not something definitive. Just an idea, maybe it's totally invalid. It needs to be test.

This came to me because while using API Platform, some users are defining routes against models just for having their routes in documentation (with a result of broken doc) but also with access control.

In facts, maybe the security.yaml file is a better place and there's no reason to change that. (probably)

I'm just writing some idea here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant