Add tip for using new userIsGranted() function

natewiebe13 · natewiebe13 · commit 04a091b22d54 · 2023-03-09T09:10:30.000-05:00
diff --git a/security.rst b/security.rst
@@ -2368,6 +2368,13 @@ want to include extra details only for users that have a ``ROLE_SALES_ADMIN`` ro
           // ...
       }
 
+.. tip::
+
+    Using ``isGranted()`` checks authorization against the currently logged in user. If wanting to check
+    against a user that isn't logged in or if checking authorization when the user session is not
+    available (example: message queue, cronjob, command) ``userIsGranted()`` can be used to set the
+    user explicitly.
+
 If you're using the :ref:`default services.yaml configuration <service-container-services-load-example>`,
 Symfony will automatically pass the ``security.helper`` to your service
 thanks to autowiring and the ``Security`` type-hint.
