minor #16308 [Security] Add PHP attributes to a PHP annotations example (javiereguiluz)

javiereguiluz · javiereguiluz · commit 2ca63e5f6df4 · 2021-12-22T17:29:52.000+01:00
This PR was squashed before being merged into the 5.3 branch. Discussion ---------- [Security] Add PHP attributes to a PHP annotations example Commits ------- fc54690 [Security] Add PHP attributes to a PHP annotations example
diff --git a/security.rst b/security.rst
@@ -2199,30 +2199,55 @@ will happen:
 Thanks to the SensioFrameworkExtraBundle, you can also secure your controller
 using annotations:
 
-.. code-block:: diff
+.. configuration-block::
 
-      // src/Controller/AdminController.php
-      // ...
+    .. code-block:: php-annotations
 
-    + use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
+        // src/Controller/AdminController.php
+        // ...
 
-    + /**
-    +  * Require ROLE_ADMIN for *every* controller method in this class.
-    +  *
-    +  * @IsGranted("ROLE_ADMIN")
-    +  */
-      class AdminController extends AbstractController
-      {
-    +     /**
-    +      * Require ROLE_ADMIN for only this controller method.
-    +      *
-    +      * @IsGranted("ROLE_ADMIN")
-    +      */
-          public function adminDashboard(): Response
-          {
-              // ...
-          }
-      }
+        use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
+
+        /**
+         * Require ROLE_ADMIN for all the actions of this controller
+         *
+         * @IsGranted("ROLE_ADMIN")
+         */
+        class AdminController extends AbstractController
+        {
+            /**
+             * Require ROLE_SUPER_ADMIN only for this action
+             *
+             * @IsGranted("ROLE_SUPER_ADMIN")
+             */
+            public function adminDashboard(): Response
+            {
+                // ...
+            }
+        }
+
+    .. code-block:: php-attributes
+
+        // src/Controller/AdminController.php
+        // ...
+
+        use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
+
+        /**
+         * Require ROLE_ADMIN for all the actions of this controller
+         */
+        #[IsGranted('ROLE_ADMIN')]
+        class AdminController extends AbstractController
+        {
+            /**
+             * Require ROLE_SUPER_ADMIN only for this action
+             */
+            #[IsGranted('ROLE_SUPER_ADMIN')]
+            public function adminDashboard(): Response
+            {
+                // ...
+            }
+        }
 
 For more information, see the `FrameworkExtraBundle documentation`_.
 
