minor symfony#9844 Better explain the use of multiple roles in access_control (javiereguiluz)

javiereguiluz · javiereguiluz · commit 72181cc0823e · 2018-05-29T08:46:44.000+02:00
This PR was merged into the 2.8 branch. Discussion ---------- Better explain the use of multiple roles in access_control This fixes symfony#8355. Commits ------- 8e5a4ee Better explain the use of multiple roles in access_control
diff --git a/security/access_control.rst b/security/access_control.rst
@@ -131,9 +131,12 @@ Once Symfony has decided which ``access_control`` entry matches (if any),
 it then *enforces* access restrictions based on the ``roles``, ``allow_if`` and ``requires_channel``
 options:
 
-* ``roles`` If the user does not have the given role(s), then access is denied
+* ``roles`` If the user does not have the given role, then access is denied
   (internally, an :class:`Symfony\\Component\\Security\\Core\\Exception\\AccessDeniedException`
-  is thrown);
+  is thrown). If this value is an array of multiple roles, the user must have
+  at least one of them (when using the default ``affirmative`` strategy in the
+  :ref:`Access Decision Manager <components-security-access-decision-manager>`)
+  or all of them when using the ``unanimous`` strategy;
 
 * ``allow_if`` If the expression returns false, then access is denied;
 
