From eef26f7ae6542c4fffdca2d18ce4b0d0c04c4c96 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20B=C3=B6hmer?= Date: Sun, 14 Aug 2022 19:11:42 +0200 Subject: [PATCH] Use PUBLIC_ACCESS role instead of IS_AUTHENTICATED_ANONYMOUSLY role --- config/packages/security.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/packages/security.yaml b/config/packages/security.yaml index cc5895ed..6dbc853e 100644 --- a/config/packages/security.yaml +++ b/config/packages/security.yaml @@ -48,9 +48,9 @@ security: # Note: Only the *first* access control that matches will be used access_control: # This makes the logout route available during two-factor authentication, allows the user to cancel - - { path: ^/logout, role: IS_AUTHENTICATED_ANONYMOUSLY } + - { path: ^/logout, role: PUBLIC_ACCESS } # This ensures that the form can only be accessed when two-factor authentication is in progress - { path: "^/\\w{2}/2fa", role: IS_AUTHENTICATED_2FA_IN_PROGRESS } # We get into trouble with the U2F authentication, if the calls to the trees trigger an 2FA login # This settings should not do much harm, because a read only access to show available data structures is not really critical - - { path: "^/\\w{2}/tree", role: IS_AUTHENTICATED_ANONYMOUSLY } + - { path: "^/\\w{2}/tree", role: PUBLIC_ACCESS }