Why use Voters instead of simple role checks?

While roles are simple strings (e.g., ROLE_ADMIN), Voters allow for complex logic, such as checking if a user is the specific author of an object they are trying to edit.

Does this skill support API Platform?

Yes, it includes specific patterns for implementing security checks within API Platform resource attributes using the is_granted() expression.

Can I test my authorization logic with this skill?

Absolutely. The skill provides boilerplate for unit testing individual Voters and functional testing to ensure the application correctly returns 403 Forbidden status codes.

What are Symfony Voters?

Voters are specialized classes in Symfony that decide whether a user has permission to perform a specific action on a resource, such as editing a post or viewing a profile.

Symfony Voters Authorization

Name: Symfony Voters Authorization
Author: MakFly

byMakFly

•

セキュリティとテスト

Implements granular, decoupled authorization logic using Symfony Voters to secure controllers, services, and APIs.

概要

This skill provides a comprehensive framework for managing complex authorization requirements in Symfony applications. By leveraging Symfony Voters, it allows developers to centralize permission logic, keeping controllers clean and business logic focused. It covers everything from basic entity-based checks to complex, resource-less voting scenarios, and includes patterns for integration with API Platform and Twig, alongside robust unit and functional testing strategies to ensure application security.

主な機能

Decoupled authorization logic via centralized Voter classes
Implementation patterns for dependency-aware and resource-less voting
Native support for API Platform security attributes
21 GitHub stars
Seamless integration with Symfony Controllers, Services, and Twig
Standardized unit and functional testing templates for security logic

ユースケース

Securing CRUD operations based on object ownership or status
Implementing complex attribute-based access control (ABAC)
Enforcing feature access based on external service logic like subscriptions

概要

主な機能

Decoupled authorization logic via centralized Voter classes
Implementation patterns for dependency-aware and resource-less voting
Native support for API Platform security attributes
21 GitHub stars
Seamless integration with Symfony Controllers, Services, and Twig
Standardized unit and functional testing templates for security logic

ユースケース

Securing CRUD operations based on object ownership or status
Implementing complex attribute-based access control (ABAC)
Enforcing feature access based on external service logic like subscriptions